[Australia] TechnologyOne will not say whether hack affected customer data

In Australia, TechnologyOne - the enterprise software company - halted trading after confirming it had been hit by a cyberattack, TechCrunch reports.

In a stock exchange filing on May 10, the Brisbane-based software maker stated that it had detected that “an unauthorized third-party acted illegally to access its internal Microsoft 365 back-office system.”

TechnologyOne reportedly said that the company’s customer-facing platform is not connected to the affected Microsoft 365 system and “therefore has not been impacted,” however, the company would not say if any customer or employee data had been accessed as a result of the wider incident when reached for comment.

Brendan Altadonna represents TechnologyOne on behalf of a third-party public relations agency. He declined to answer further questions from TechCrunch. Mr Altadonna said that the company will only be able to provide further details once its investigation has progressed.

The nature of the incident is currently unknown.

The cyberattack has reportedly not been claimed by any of the major ransomware groups as yet. Ransomware actors sometimes publish stolen information as part of efforts to extort victims.

TechnologyOne is the latest Australian technology company to confirm a breach. Over recent months a spate of high-profile cyberattacks has compromised the personal information of millions of Australians.

In September 2022, Australian telecoms giant Optus reportedly said that current and former customer data - including driver’s licence and passport numbers - had been accessed following a cyberattack on its systems. In November, Australian health insurance giant Medibank confirmed hackers had stolen 9.7 million customers’ personal details and health claims data for almost 500,000 people.

Source: TechCrunch

(Links and quotes via original reporting)

In Australia, TechnologyOne - the enterprise software company - halted trading after confirming it had been hit by a cyberattack, TechCrunch reports.

In a stock exchange filing on May 10, the Brisbane-based software maker stated that it had detected that “an unauthorized third-party acted illegally to access its internal Microsoft 365 back-office system.”

TechnologyOne reportedly said that the company’s customer-facing platform is not connected to the affected Microsoft 365 system and “therefore has not been impacted,” however, the company would not say if any customer or employee data had been accessed as a result of the wider incident when reached for comment.

Brendan Altadonna represents TechnologyOne on behalf of a third-party public relations agency. He declined to answer further questions from TechCrunch. Mr Altadonna said that the company will only be able to provide further details once its investigation has progressed.

The nature of the incident is currently unknown.

The cyberattack has reportedly not been claimed by any of the major ransomware groups as yet. Ransomware actors sometimes publish stolen information as part of efforts to extort victims.

TechnologyOne is the latest Australian technology company to confirm a breach. Over recent months a spate of high-profile cyberattacks has compromised the personal information of millions of Australians.

In September 2022, Australian telecoms giant Optus reportedly said that current and former customer data - including driver’s licence and passport numbers - had been accessed following a cyberattack on its systems. In November, Australian health insurance giant Medibank confirmed hackers had stolen 9.7 million customers’ personal details and health claims data for almost 500,000 people.

Source: TechCrunch

(Links and quotes via original reporting)