1.5 million Good Guys customers' private information stolen in cyberattack
- Replies 7
We have some disconcerting news to share today, members.
A third-party supplier of electronics giant The Good Guys was reported to be the target of an electronic cyber attack and the personal information of an estimated 1.5 million customers was exposed as a result.
The target? Customers who were a part of the ‘Concierge’ Good Guys rewards system.
Unfortunately, the IT systems of their former third-party supplier My Rewards (formerly known as Pegasus Group Australia) were accessed by an unauthorised user.
My Rewards collected 'Concierge' members' names, addresses, phone numbers, emails and, for some, dates of birth, which makes it all the more concerning that this data was likely stolen during the attack.
The technical expert explains that despite personal information being collected, the company is notifying members that payment information such as ID numbers and credit card details were not accessed.
While the breach itself is believed to have taken place in August 2021, it was only reported recently, leaving many customers wondering whether their personal details have fallen into the wrong hands.
Those scam calls you’ve received and can’t figure out where they got your number? That’s right, it could have been from this breach.
As part of its response to the breach, The Good Guys have contacted a staggering 325,000 Concierge members who had set up an account, along with an additional 1.5 million members whose contact details may have been compromised.
With the company no longer using My Rewards and accounts linked to Concierge member benefits now closed, customers can let out a small sigh of relief.
But the question on everyone's minds remains: how did this happen, and who is responsible for such a colossal security lapse?
The retail company's managing director, Biag Capasso, issued an apology for the incident, acknowledging the significant worry it has caused customers. Capasso also stressed the importance of data security, stating that The Good Guys takes the matter very seriously.
Meanwhile, the company responsible for the breach, My Rewards, has come under scrutiny for failing to adequately protect customers' data.
A spokesman for the company attempted to relieve fears by claiming that no serious harm had been caused, but this has done little to reassure customers who are still uncertain about the extent of the breach.
The company is now working closely with federal government authorities to minimise the impact of the breach, but questions remain about how such a significant breach could have occurred in the first place.
Are you worried about your personal data being at risk? It can be a scary and stressful situation, but there is help available.
IDCARE is a free service that offers support to people who have been affected by cybercrime or identity theft. With their assistance, you can recover from the incident and take steps to protect your personal information in the future.
Recently, The Good Guys engaged IDCARE to help community members who may have been affected by the My Rewards data breach.
If you are concerned that your personal information may have been exposed in this breach, IDCARE can provide extra support and guidance to help you navigate the situation.
Here is some of IDCARE's advice for data breach victims:
Don't respond to unsolicited messages without verifying the source using other trusted contact methods.
It's important to be cautious when receiving messages or phone calls that you didn't ask for or expect. Even if the person seems to know some information about you, it's not always safe to trust them. Before responding, take the time to investigate the source by using other contact methods that you trust.
For example, if you receive an unexpected email or text message from someone claiming to be a representative of a company or organisation, don't respond to them right away. Instead, try to verify their identity by looking up the company's official website or phone number and contacting them directly.
Change passwords for accounts using the same combination as the compromised password.
If you have received a notification that one of your passwords has been compromised, there are steps you can take to protect yourself.
If you've used the same username and password combination for other online accounts, it's important to change those passwords too. This helps ensure that your other accounts are not vulnerable to attack.
To make it easier to manage all of your passwords, you might want to consider using a password manager, which can help you create strong, unique passwords for each account and store them securely.
Another way to add an extra layer of protection to your accounts is by enabling multi-factor authentication if it's available. This can help prevent unauthorised access to your accounts, even if someone manages to obtain your password.
Scammers like to create a sense of urgency for their victims to 'act now', so don't be pressured to respond.
Scammers often use urgency as a tactic to pressure people into making a hasty decision. They might threaten to take away a service or even have you arrested if you don't act immediately, or they might offer a refund or discount, but only if you respond right away.
It's important to remember that you don't have to respond to these types of communications right away. Take the time to think it over and verify the source before making any decisions. Scammers often rely on people acting impulsively, so by slowing down and considering your options, you can help protect yourself from fraud.
If you're unsure about a message you've received, don't be afraid to seek help from a trusted source, such as a family member, friend, or cybersecurity expert.
Cyber-attacks and data breaches are not just isolated incidents that happen to big companies; they can happen to anyone. In today's digital age, it's more important than ever to stay informed and educated about the latest developments in data security to protect yourself and your family from potential harm.
By keeping up with the news, you can learn about the different types of cyber-attacks, how they work, and the best practices to prevent them from happening to you. Make it a habit to stay up-to-date, and feel free to check out the Scam Watch forum on the SDC website for more information.
In light of the recent data breach, we urge everyone who was a part of their loyalty program to check for any suspicious emails or messages. Your safety and security are of utmost importance, so stay vigilant and stay safe, members!
A third-party supplier of electronics giant The Good Guys was reported to be the target of an electronic cyber attack and the personal information of an estimated 1.5 million customers was exposed as a result.
The target? Customers who were a part of the ‘Concierge’ Good Guys rewards system.
Unfortunately, the IT systems of their former third-party supplier My Rewards (formerly known as Pegasus Group Australia) were accessed by an unauthorised user.
My Rewards collected 'Concierge' members' names, addresses, phone numbers, emails and, for some, dates of birth, which makes it all the more concerning that this data was likely stolen during the attack.
The technical expert explains that despite personal information being collected, the company is notifying members that payment information such as ID numbers and credit card details were not accessed.
While the breach itself is believed to have taken place in August 2021, it was only reported recently, leaving many customers wondering whether their personal details have fallen into the wrong hands.
Those scam calls you’ve received and can’t figure out where they got your number? That’s right, it could have been from this breach.
As part of its response to the breach, The Good Guys have contacted a staggering 325,000 Concierge members who had set up an account, along with an additional 1.5 million members whose contact details may have been compromised.
With the company no longer using My Rewards and accounts linked to Concierge member benefits now closed, customers can let out a small sigh of relief.
But the question on everyone's minds remains: how did this happen, and who is responsible for such a colossal security lapse?
The retail company's managing director, Biag Capasso, issued an apology for the incident, acknowledging the significant worry it has caused customers. Capasso also stressed the importance of data security, stating that The Good Guys takes the matter very seriously.
Meanwhile, the company responsible for the breach, My Rewards, has come under scrutiny for failing to adequately protect customers' data.
A spokesman for the company attempted to relieve fears by claiming that no serious harm had been caused, but this has done little to reassure customers who are still uncertain about the extent of the breach.
The company is now working closely with federal government authorities to minimise the impact of the breach, but questions remain about how such a significant breach could have occurred in the first place.
Are you worried about your personal data being at risk? It can be a scary and stressful situation, but there is help available.
IDCARE is a free service that offers support to people who have been affected by cybercrime or identity theft. With their assistance, you can recover from the incident and take steps to protect your personal information in the future.
Recently, The Good Guys engaged IDCARE to help community members who may have been affected by the My Rewards data breach.
If you are concerned that your personal information may have been exposed in this breach, IDCARE can provide extra support and guidance to help you navigate the situation.
Key Takeaways
- Up to 1.5 million The Good Guys loyalty program customers have had their personal information hacked.
- The data allegedly accessed includes names, addresses, passwords, phone numbers and emails, and for some, dates of birth.
- Drivers licence, passport and credit card data were reportedly not involved in the breach.
- Those impacted by the breach have been encouraged to contact IDCARE, Australia's national identity and cyber support community service.
Don't respond to unsolicited messages without verifying the source using other trusted contact methods.
It's important to be cautious when receiving messages or phone calls that you didn't ask for or expect. Even if the person seems to know some information about you, it's not always safe to trust them. Before responding, take the time to investigate the source by using other contact methods that you trust.
For example, if you receive an unexpected email or text message from someone claiming to be a representative of a company or organisation, don't respond to them right away. Instead, try to verify their identity by looking up the company's official website or phone number and contacting them directly.
Change passwords for accounts using the same combination as the compromised password.
If you have received a notification that one of your passwords has been compromised, there are steps you can take to protect yourself.
If you've used the same username and password combination for other online accounts, it's important to change those passwords too. This helps ensure that your other accounts are not vulnerable to attack.
To make it easier to manage all of your passwords, you might want to consider using a password manager, which can help you create strong, unique passwords for each account and store them securely.
Another way to add an extra layer of protection to your accounts is by enabling multi-factor authentication if it's available. This can help prevent unauthorised access to your accounts, even if someone manages to obtain your password.
Scammers like to create a sense of urgency for their victims to 'act now', so don't be pressured to respond.
Scammers often use urgency as a tactic to pressure people into making a hasty decision. They might threaten to take away a service or even have you arrested if you don't act immediately, or they might offer a refund or discount, but only if you respond right away.
It's important to remember that you don't have to respond to these types of communications right away. Take the time to think it over and verify the source before making any decisions. Scammers often rely on people acting impulsively, so by slowing down and considering your options, you can help protect yourself from fraud.
If you're unsure about a message you've received, don't be afraid to seek help from a trusted source, such as a family member, friend, or cybersecurity expert.
Cyber-attacks and data breaches are not just isolated incidents that happen to big companies; they can happen to anyone. In today's digital age, it's more important than ever to stay informed and educated about the latest developments in data security to protect yourself and your family from potential harm.
By keeping up with the news, you can learn about the different types of cyber-attacks, how they work, and the best practices to prevent them from happening to you. Make it a habit to stay up-to-date, and feel free to check out the Scam Watch forum on the SDC website for more information.
In light of the recent data breach, we urge everyone who was a part of their loyalty program to check for any suspicious emails or messages. Your safety and security are of utmost importance, so stay vigilant and stay safe, members!