Security

Just 13 – no, er, make that 3,200 punters hit in Oz's Perth Mint hack

Unnamed third-party provider spaffed customer data


A computer security breach at Perth Mint first thought to have affected just 13 customers turned out to be more widespread – with more than 3,000 punters now screwed over by hackers.

Last week, the Australian Broadcasting Corporation reported barely more than two handfuls of users of the mint's online repository were hit in the cyber-break-in.

The Western Australian-government-owned Perth Mint is Oz's bullion mint, and its repository is the customers buy-and-sell trading platform for precious metals.

The organisation launched an investigation into the network intrusion, and as part of that, CEO Richard Hayes yesterday announced the security breach involved 3,200 customers.

Hayes' announcement stated: “As previously advised, ongoing forensic investigations continue and we were made aware of this development over the weekend. We have moved quickly to contact the affected Depository Online customers in order to protect their interests.“

Hayes attributed the security failings to a third party provider, and said the mint's internal systems have not been compromised.

Affected customers had their personal information breached, the mint said, but “we have again assured our customers that their investments are unaffected and remain safe and secure”.

The mint also said it believes it's now identified the full scope of the breach, with Hayes saying he was “confident that no data belonging to any other investors or customers had been accessed”.

The Office of the Australian Information Commissioner, Western Australian Police, and the Australian Federal Police have been notified.

One punter told Vulture South that users' entire profiles leaked, and that the mint is advising those affected to look for suspect transactions in their bank accounts. We have asked the mint for confirmation. ®

Send us news
2 Comments

Pandabuy confirms crooks nabbed data on 1.3M punters

Nothing says 'sorry' like 10 percent off shipping for a month

US House approves FISA renewal – warrantless surveillance and all

PLUS: Chinese chipmaker Nexperia attacked; A Microsoft-signed backdoor; CISA starts scanning your malware; and more

Global taxi software vendor exposes details of nearly 300K across UK and Ireland

High-profile individuals including MPs said to be caught up in leak

SharePoint logs are easily circumvented and Microsoft is dragging its heels

Now is the perfect time to review those permissions

Puppies, kittens, data at risk after 'cyber incident' at veterinary giant

IT systems pulled offline for chance to paws and reflect

Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits

INC Ransom emerges as a growing threat as some ex-LockBit/ALPHV affiliates get new gigs

OWASP server blunder exposes decade of resumes

Irony alerts: Open Web Application Security Project Foundation suffers lapse

Nearly 3M people hit in Harvard Pilgrim healthcare data theft

Also, TheMoon botnet back for EoL SOHO routers, Sellafield to be prosecuted for 'infosec failures', plus critical vulns

AT&amp;T admits massive 70M+ mid-March customer data dump is real though old

Still claims the personal info wasn't stolen from its systems

Street newspaper appears to have Big Issue with Qilin ransomware gang

The days of cybercriminals having something of a moral compass are over

Microsoft confirms memory leak in March Windows Server security update

ALSO: Viasat hack wiper malware is back, users are the number one cause of data loss, and critical vulns

Yacht dealer to the stars attacked by Rhysida ransomware gang

MarineMax may be in choppy waters after 'stolen data' given million-dollar price tag