City of Port Phillip

City of Port Phillip suffered a data breach incident after an incident that occurred on their online customer portal, My Port Phillip.

33 new users to the portal may have been able to view requests other than their own and apparently the name, address, phone number and/or email address (if supplied when logging a request) may have been viewed by one of these 33 people.

The city immediately established multifactored authentication, secure passwords, firewalls, end point protection and encryption when data is accessed, handled, transmitted, hosted or stored.

Source: https://www.databreaches.net/au-city-of-port-phillip-notification-of-potential-data-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/city-of-port-phillip

"id": "cit1631171222",
"linkid": "city-of-port-phillip",
"type": "Breach",
"date": "12/2022",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 33,
                        'industry': 'Public Administration',
                        'location': 'Port Phillip, Australia',
                        'name': 'City of Port Phillip',
                        'type': 'Government'}],
 'attack_vector': 'Unauthorized access',
 'data_breach': {'personally_identifiable_information': ['Name',
                                                         'Address',
                                                         'Phone Number',
                                                         'Email Address'],
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': 'City of Port Phillip suffered a data breach incident after an '
                'incident that occurred on their online customer portal, My '
                'Port Phillip. 33 new users to the portal may have been able '
                'to view requests other than their own and apparently the '
                'name, address, phone number and/or email address (if supplied '
                'when logging a request) may have been viewed by one of these '
                '33 people.',
 'impact': {'data_compromised': ['Name',
                                 'Address',
                                 'Phone Number',
                                 'Email Address'],
            'systems_affected': ['Online Customer Portal - My Port Phillip']},
 'response': {'remediation_measures': ['Established multifactored '
                                       'authentication',
                                       'Secure passwords',
                                       'Firewalls',
                                       'End point protection',
                                       'Encryption when data is accessed, '
                                       'handled, transmitted, hosted or '
                                       'stored']},
 'title': 'City of Port Phillip Data Breach Incident',
 'type': 'Data Breach'}