TAFE NSW

Computer hackers have allegedly breached TAFE NSW's payroll system and stolen bank details of at least two dozen staff.

Around 30 employees have not been paid on time after having personal information stolen.

The organisation was working with the NSW Police Cyber Crime Unite to identify the source of the data breach and to ensure it does not happen again.

The attempt was discovered quickly and measures immediately put in place to stop fraudulent payments.

Source: https://www.9news.com.au/national/tafe-nsw-data-stolen-staff-data-breach-hackers-pay/1792ef6e-2379-49f2-94af-d5ad35bb0fdf

TPRM report: https://scoringcyber.rankiteo.com/company/tafe-nsw

"id": "taf0403423",
"linkid": "tafe-nsw",
"type": "Breach",
"date": "08/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Education',
                        'location': 'New South Wales, Australia',
                        'name': 'TAFE NSW',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Payroll System Breach',
 'data_breach': {'number_of_records_exposed': 'At least two dozen',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Bank Details',
                                              'Personal Information']},
 'description': "Computer hackers have allegedly breached TAFE NSW's payroll "
                'system and stolen bank details of at least two dozen staff. '
                'Around 30 employees have not been paid on time after having '
                'personal information stolen. The organisation was working '
                'with the NSW Police Cyber Crime Unite to identify the source '
                'of the data breach and to ensure it does not happen again. '
                'The attempt was discovered quickly and measures immediately '
                'put in place to stop fraudulent payments.',
 'impact': {'data_compromised': 'Bank Details, Personal Information',
            'identity_theft_risk': 'High',
            'operational_impact': 'Delayed Payments',
            'payment_information_risk': 'High',
            'systems_affected': 'Payroll System'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial Theft',
 'response': {'containment_measures': 'Measures put in place to stop '
                                      'fraudulent payments',
              'law_enforcement_notified': 'Yes',
              'third_party_assistance': 'NSW Police Cyber Crime Unite'},
 'threat_actor': 'Unknown Hackers',
 'title': 'TAFE NSW Payroll System Data Breach',
 'type': 'Data Breach'}