We have recently become aware that between 13 August 2019 and 26 August 2019, an unidentified third party gained unauthorised access to our Computer System. During this process, the third party may have captured personal email contacts & personal information for potential fraudulent use. As soon as we became aware of this incident, we took immediate steps to confirm that our computer systems and our wider IT environment was secure.

Since this time, we have been working closely with our external IT and Cyber Security consultant to fully investigate the circumstances of the incident and confirm which customers may have been impacted.  Our number one focus has been to clearly identify who has been (and rule out who has not been) potentially affected by this incident and also identify precisely what information is involved so we can meaningfully inform you about how you may have been affected.

We are now in the process of directly notifying our clients who may have been affected and informing them of the steps they can take in response to this incident. We have notified the Office of the Australian Information Commissioner and reported the incident to the Australian Cyber Crime Online Reporting Network and the NSW Police.

As an organisation, we attach a high value to our client data and we take the protection of our clients’ data very seriously. We have been and will continue to work with the relevant authorities and independent security experts. We are deeply sorry for any disruption that this incident causes for our clients. We are doing everything we can to ensure the ongoing security of our systems to prevent this type of incident occurring again in the future.