Wednesday 1st May 2024

Good Morning everyone! Thank you for clicking on today's edition of Cyber Daily. Today's stories serve as a potent reminder that no one is safe from the sophisticated tactics of cyber attackers. From the sunny shores of Australia where Firstmac customers woke up to news of a data breach, to the secretive corners of Belarus where hackers are doxxing KGB agents, all the way to the bustling retail spaces of Canada with London Drugs shutting its doors due to a cyber onslaught—these incidents underscore a crucial need for vigilance.

Firstmac Suffers Cyberattack, Customer Data Breached

In a troubling revelation, Brisbane-based Firstmac, Australia's 12th largest non-bank home loan lender, announced a significant cybersecurity breach. On Tuesday, Firstmac emailed customers disclosing that an unauthorised third party accessed parts of their IT system, potentially compromising sensitive information such as tax file numbers, dates of birth, and contact details.

This incident marks yet another cybersecurity breach targeting financial institutions, following recent attacks on Latitude Financial and Suncorp. Although Suncorp experienced unauthorised access to customer bank balances, it stopped short of labeling the activity a hack.

Firstmac, known also for its sponsorship of the Brisbane Broncos and its affiliation with ASX-listed BNK (trading as Goldfields Money), is taking steps to mitigate the damage. The company has enlisted IDCare to offer free identity and cyber support to affected customers and recommends vigilance against further scams. Additionally, Firstmac is in the process of engaging forensic experts to deepen the investigation into the breach, emphasising their commitment to transparency and customer care in these challenging times.

For those affected: Stay alert for suspicious activities and consider contacting the Australian Tax Office for enhanced monitoring of your financial accounts.

Belarusian Hackers Strike Secret Service, Leak Agent Details

In a bold cyber offensive, the Belarusian hacking group Cyber Partisans has claimed responsibility for infiltrating the Belarusian KGB's system and doxxing nearly 9,000 agents and informants. Announced via Telegram and X, the group caused a two-month outage on the KGB's site and subsequently released the details of 8,600 KGB employees.

The Cyber Partisans didn't stop there; they also developed a bot capable of identifying agents from a photo, providing personal details if the image contains a recognised KGB officer. Additionally, the group leaked over 40,000 forms sent to the KGB by informants, demonstrating the extensive nature of their data breach.

This isn't the group's venture into high-profile cyber activism; they previously turned Belarusian President Aleksandr Lukashenko’s passport into an NFT, which was briefly available on OpenSea. The move is seen as part of a broader protest against the alleged repressive activities of the Belarusian special services, with group coordinator Yuliana Shametavets asserting their intent is to protect, not harm, Belarusians against what she describes as the largest political repressions in the nation's history.

London Drugs Shutters Stores After Cyberattack

London Drugs, a major Canadian retailer with 79 stores across British Columbia, Alberta, Saskatchewan, and Manitoba, has temporarily closed all its locations following a cyberattack over the weekend. The company, known for its wide range of products from pharmaceuticals to electronics, cited the shutdown as a precautionary measure while their e-commerce operations are also on hold.

In a statement released on Monday, spokesperson Jessica Harcombe Fleming highlighted that although the stores are closed, pharmacists remain on-site to address urgent pharmacy needs. This cyberattack is the latest in a series of digital security breaches affecting Canadian retailers, echoing incidents like the costly hacks at Indigo Books & Music Inc. and Sobeys' parent company, Empire Co. Ltd.

With cyberattacks on the rise globally, impacting both sales and sensitive data, the urgency for robust cybersecurity measures is more pronounced than ever. London Drugs has engaged third-party cybersecurity experts to help contain the breach and is undergoing a forensic investigation, though it is currently believed that no customer or employee data has been compromised.

Security Alert: Businesses are increasingly vulnerable to cyber threats, stressing the importance of proactive security practices and comprehensive insurance strategies to mitigate potential damages.