Cyber update | Super funds data breach

You’ve probably heard about the recent data breach affecting several major Australian superannuation funds. The attack primarily involved credential stuffing, where attackers used previously compromised login credentials to access accounts.

If you are a member of an affected fund, this can be a scary time. We want to give you an update and some practical tools you can implement to ensure your accounts are protected.

What super funds were affected?

• AustralianSuper: Reported 600 member accounts with stolen passwords, with four members experiencing financial losses totalling $500,000.
• Rest: Approximately 8,000 members may have had personal information accessed, though no funds were transferred.
• Australian Retirement Trust, Hostplus, and Insignia Financial: Detected suspicious activities with some accounts compromised, however, no financial losses have been reported from these funds. ​
• All superannuation funds have been asked by regulators to report if they were impacted by the cyber attack by midday today (Monday 7 April).

What should you do if your fund was impacted?

If you or anyone you know is a member of one of these funds, please note:

1. If you’ve been impacted you will hear from your fund: The affected funds are directly contacting members whose data has been compromised.
2. Update security measures: Cyber Wardens strongly recommends changing your password and enabling multi-factor authentication (MFA) in your fund management account.
3. AustralianSuper members: If you experienced login issues over the weekend or have seen a $0 balance, please be aware that AustralianSuper has assured its members that accounts remain secure despite these display issues.
4. Remain vigilant: Watch out for suspicious activity on your account.
5. Share cyber security training: Recommend the free and fast Cyber Wardens course to your friends and family by forwarding this email or sending this link: https://cyberwardens.com.au/.

Be proactive and protect yourself! 

Join our upcoming Cyber Wardens Foundations webinar guest speakers featuring industry-leading specialists and small business owners who will share essential strategies to help protect your business against cyber crime.

• Aami Mills, Founder, Mimi & Co | Wednesday 9 April at 12:30pm and Friday 11 April at 10:00am.

Join us as Aami shares her own scam story and how she recovered after losing $10,000 to scammers.

• Scott Mulholland, Assistant Director, IP Australia | Thursday 10 April at 12:30pm

Join Scott as he discusses how to safeguard your intellectual property from cyber threats and protect your business’s valuable assets in the digital landscape.

• Mark Schmidt, Senior Cyber Consultant, AiGroup | Monday 14 April at 2:00pm.

Join Mark as he outlines the biggest cyber risks for small businesses and some practical tips to stay safe online.

In the free Cyber Wardens webinar, you will learn:

The biggest cyber security risks targeting small businesses

Red flags and warning signs your business is at risk

Everyday habits that make you more vulnerable to cyber crime

Why small business cyber security is a team sport

Once you complete the Cyber Wardens Foundations webinar, you will receive your certificate as a new Cyber Wardens graduate.

Reserve your spot today for one of these special sessions and start your journey towards cyber security for your small business!

We look forward to seeing you online soon!

Cyber Wardens Team

Cyber Wardens is a national initiative of the Council of Small Business Organisations of Australia (COSBOA), supported by the Australian Government and an industry alliance led by Telstra, CommBank and the Australian Cyber Security Centre, to help protect Australia’s 2.5 million small businesses from online threats. The program builds a culture of cyber safety and creates cyber skills within Australian small businesses.