Australia’s Premier Non-Bank Lender Suffers Data Security Breach

 

One of Australia’s largest non-bank mortgage lenders, Firstmac, has suffered a cyberattack, which resulted in customer information such as credit card and passport numbers, Medicare numbers and driver’s licence numbers being stolen and published on the dark web. In a letter sent to its customers, the Brisbane-based lender informed them that one of its information technology systems had been successfully breached by an unauthorised third party, making it one of Australia’s largest non-bank lenders. 
According to the non-bank lender, hackers have taken possession of nearly ten thousand driver’s licenses and two hundred and fifty thousand “customer records” over the last few days. The company notified the Australian Stock Exchange of the incident. As a result of the unusual activity it has detected on its systems “in the last few days,” the company has suspended trading until Monday. The hackers were said to be very sophisticated.
There is no indication that the hackers gained access to Latitude information held at two separate service providers by using employee login credentials – whether they have been stolen or if this was a credential stuffing attack – which they were not aware of. A consortium of investors, including KKR and Deutsche Bank, acquired Latitude from GE in 2015 to sell its credit cards and instalment payment plans to retailers. In 2021, the company became public. 
This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents

Read the original article: