Latitude hack now under state investigation as customers struggle to protect their accounts

Shutterstock

Latitude Financial has disclosed that a cyber attack that strike the corporation previous 7 days is now less than investigation by the Australian Federal Police (AFP).

The corporation explained on 16 March that it experienced detected strange exercise on its systems. Currently, it confirmed that the exercise is a sophisticated and malicious cyber attack which is nevertheless ongoing.

Latitude has taken its techniques offline and is unable to services its customers or service provider partners, it explained. On the other hand, it is aiming to restore its system “gradually” more than the following number of times.

Using the units offline has currently impacted a score of its clients, all reporting many diverse issues.

@latitude_fs I want aid regarding a obtain I designed final weekend on the internet. I tried to phone for consumer help and observed out through recorded information about the cyber attack. I need to have to discuss to an individual to affirm the buy is desire free, how can I do this?!

— Kay Elle (@unidentifiedten) March 16, 2023

Just one consumer complained on Twitter that they ended up not able to make changes to their account, these kinds of as placing a new password, but could not access it due to the applicable techniques becoming taken offline.

“Unfortunately, we have limited entry to internal and shopper-facing techniques,” replied a consumer provider agent. “This is to assure we consist of the security breach. I understand it truly is really aggravating not staying equipped to log in.”

Other people had been not able to make payments as a consequence of devices being taken offline, and one particular stated it was the next time their knowledge experienced been accessed in modern occasions, with the initially remaining by the important ransomware attack on Medibank in October 2022.

As nicely as the AFP, the monetary providers firm has also engaged the Australian Cyber Security Centre (ACSC), cyber security experts, and other authorities companies.

“Our people today are working all-around the clock to consist of the attackers. We have taken the prudent motion of isolating some of our technology platforms which implies that we are currently not onboarding new consumers,” Latitude explained.

“In conjunction with our cyber security experts, we are continuing our forensic evaluation of our IT platforms to discover the total extent of the theft of purchaser information as a outcome of the attack on Latitude.”

Latitude has confirmed that around 330,000 customers and applicants have had their individual information and facts stolen so much, all-around 96% of which is associated to the theft of driving licenses or numbers.

The remaining stolen information was comprised of copies of passports or passport quantities, and Medicare figures, 4% and 1% respectively, by Latitude’s estimates.

On the other hand, the organization said that it is likely to learn a lot more stolen information impacting current and earlier Latitude customers and candidates, as it carries on with a forensic evaluate which will now contain “non-client originating platforms and historical purchaser information”.

The Melbourne fiscal agency, which provides credit score cards, insurance plan, and loans to individuals and businesses, is set to get in touch with every impacted individual to confirm what personalized facts has been stolen.

It will get the job done with suitable businesses to exchange identification documents at no price to Latitude buyers. Latitude has also enlisted IDCARE, a charity that presents assist to people or corporations that undergo a cyber attack. 

Latitude also confirmed that it has cyber security insurance coverage and has notified its insurers of the cyber attack.

“While we carry on to deliver transactional solutions, some performance has been impacted ensuing in disruption,” said Ahmed Fahour, CEO at Latitude.

“We are working incredibly tough to restore full providers to our clients and service provider associates and thank them for their patience and support. We realize their irritation.”

Some pieces of this report are sourced from:
www.itpro.co.uk