A security breach of a cloud-based client management service provider, CTARS, used by the National Disability Insurance Scheme (NDIS) has exposed a “large volume” of health and other sensitive data.
An unauthorized third party gained access to its systems and exfiltrated a large volume of data and posted a sample of that data on a [dark] web form.
The data included documents containing personal information relating to its customers and their clients including NDIS and carers.
the compromised information included the details of the diagnoses, treatment, or recovery of a medical condition or disability.
CTARS engaged identity and cyber support service IDCare to support NDIS participants and providers, and OOHC participants and carers, navigate the data breach.
Source: https://www.itnews.com.au/news/ndis-case-management-system-provider-breached-580729
"id": "CTA33411822",
"linkid": "ctars",
"type": "Breach",
"date": "05/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"