A cyber attack on an Accellion-owned file transfer system has been identified as having an effect on Transport for New South Wales (TfNSW).
Some Transport for NSW information was obtained prior to the attack on Accellion servers being stopped.
According to TfNSW, the state government investigation is being managed by Cyber Security NSW with the aid of forensic experts.
In order to investigate the implications of the incident, particularly how it may have affected customer data, the organisation said it is closely collaborating with Cyber Security NSW.
Source: https://www.zdnet.com/article/transport-for-nsw-confirms-data-taken-in-accellion-data-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/transport-for-nsw
"id": "tra23379923",
"linkid": "transport-for-nsw",
"type": "Data Leak",
"date": "02/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Transportation',
'location': 'New South Wales, Australia',
'name': 'Transport for New South Wales',
'type': 'Government Agency'}],
'attack_vector': 'Exploitation of Vulnerability',
'data_breach': {'type_of_data_compromised': 'Customer Data'},
'description': 'A cyber attack on an Accellion-owned file transfer system has '
'been identified as having an effect on Transport for New '
'South Wales (TfNSW). Some Transport for NSW information was '
'obtained prior to the attack on Accellion servers being '
'stopped. According to TfNSW, the state government '
'investigation is being managed by Cyber Security NSW with the '
'aid of forensic experts. In order to investigate the '
'implications of the incident, particularly how it may have '
'affected customer data, the organisation said it is closely '
'collaborating with Cyber Security NSW.',
'impact': {'data_compromised': 'Customer Data',
'systems_affected': 'Accellion File Transfer System'},
'initial_access_broker': {'entry_point': 'Accellion File Transfer System'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Transport for New South Wales'}],
'response': {'third_party_assistance': 'Forensic Experts'},
'title': 'Cyber Attack on Transport for New South Wales via Accellion File '
'Transfer System',
'type': 'Data Breach',
'vulnerability_exploited': 'Accellion File Transfer System'}