Hacker hits one of Australia’s largest charities with a cyber attack - is donor information safe?
- Replies 7
Once again, we're faced with the harsh reality that no one is safe from the threats of cybercrime — not even charities.
This time, it was the Australian organisation The Smith Family who fell victim to a hacking attempt in which personal donor information may have been accessed by unauthorised third parties.
According to a statement released by the charity, the attempted theft occurred when hackers tried to use a team member's email account to steal funds.
Luckily, their attempts were unsuccessful and The Smith Family was able to quickly shut down the unauthorised access before any significant damage could be done.
However, as a result of the incident, approximately 80,000 individuals may have been affected.
'We promptly acted and… immediately took steps to secure our systems.’ Chief Executive Doug Taylor said in a statement.
Once they had ensured that no more damage could be done by the hackers, The Smith Family began investigating what had happened during the cyber attack.
What they discovered is that personal information about some donors’ details may have been accessed by hackers, including names, donation amounts — and in cases where such information was provided to the charity — addresses, phone numbers, and email addresses.
The Smith Family also shared that the first and last four digits of donors’ credit or debit cards used to donate and transaction statuses (whether donations were successful or declined) were also leaked in some cases.
However, there is some good news for donors.
‘We can confirm for those with potential credit or debit card details accessed, no middle digits, expiry date or CVV numbers were accessed,’ The Smith Family said, as they do not store the information on their system.
The charity also stressed that it does not hold sensitive documents such as passports and licences as these are not donation prerequisites.
‘There is no current evidence of misuse of any individual’s personal information.’ the charity said.
‘The data accessed in itself cannot be used to make fraudulent purchases.’
The Smith Family will be reaching out to concerned individuals, even donors whose information was found unaccessed in the cyber attack, as they ‘want to communicate transparently’ to their supporters.
Affected parties are encouraged to reach the charity via email at [email protected]. Meanwhile, recipient students or families can reach them on 1800 280 223 for any concerns arising from the incident.
The Smith Family has also tapped the services of IDCARE, the national support service for victims of identity and cyber crimes.
Affected individuals may access the service for free Monday to Friday, 9 AM to 6 PM (AEDT), via their Individual Get Help Form or by phone at 1800 595 160. They are urged to use the referral code TSF22 to ensure swift service.
The incident comes after telecommunications company Optus and health insurance provider Medibank were hit by similar cyber attacks.
The major incidents have raised fears of what could be done with the information the attacks have exposed.
The Smith Family says it currently supports around 58,000 poor and disadvantaged students through its Learning for Life program.
What is your reaction to this story? How do you think this will affect crucial funding the charity receives through donations?
Tell us your thoughts and opinions below!
Source: YouTube/7 News Australia
This time, it was the Australian organisation The Smith Family who fell victim to a hacking attempt in which personal donor information may have been accessed by unauthorised third parties.
According to a statement released by the charity, the attempted theft occurred when hackers tried to use a team member's email account to steal funds.
Luckily, their attempts were unsuccessful and The Smith Family was able to quickly shut down the unauthorised access before any significant damage could be done.
However, as a result of the incident, approximately 80,000 individuals may have been affected.
'We promptly acted and… immediately took steps to secure our systems.’ Chief Executive Doug Taylor said in a statement.
Once they had ensured that no more damage could be done by the hackers, The Smith Family began investigating what had happened during the cyber attack.
What they discovered is that personal information about some donors’ details may have been accessed by hackers, including names, donation amounts — and in cases where such information was provided to the charity — addresses, phone numbers, and email addresses.
The Smith Family also shared that the first and last four digits of donors’ credit or debit cards used to donate and transaction statuses (whether donations were successful or declined) were also leaked in some cases.
However, there is some good news for donors.
‘We can confirm for those with potential credit or debit card details accessed, no middle digits, expiry date or CVV numbers were accessed,’ The Smith Family said, as they do not store the information on their system.
The charity also stressed that it does not hold sensitive documents such as passports and licences as these are not donation prerequisites.
‘There is no current evidence of misuse of any individual’s personal information.’ the charity said.
‘The data accessed in itself cannot be used to make fraudulent purchases.’
The Smith Family will be reaching out to concerned individuals, even donors whose information was found unaccessed in the cyber attack, as they ‘want to communicate transparently’ to their supporters.
Affected parties are encouraged to reach the charity via email at [email protected]. Meanwhile, recipient students or families can reach them on 1800 280 223 for any concerns arising from the incident.
The Smith Family has also tapped the services of IDCARE, the national support service for victims of identity and cyber crimes.
Key Takeaways
- The Australian charity The Smith Family has been hit by a cyber attack that may have allowed donor information to be accessed by hackers.
- The charity said an unauthorised third party was attempting to steal funds from The Smith Family using a team member’s email account before they were shut down.
- The Smith Family believes that the total number of affected individuals was just under 80,000.
- The personal information of supporters that may have been accessed includes a mixture of names, phone numbers, addresses, email addresses, information about whether a donation payment was processed successfully or declined, donation amounts, and in some cases, the first and last four digits of cards used for donation.
- For donors whose partial credit or debit card details were compromised, The Smith Family said no middle digits, expiry dates, and CVV numbers were accessed as they do not store the data in their system.
- The charity also said there is no evidence of misused donor information.
- The Smith Family will reach out to all stakeholders in the interest of transparency.
- The charity also encourages affected parties to reach them for any questions and clarifications.
The incident comes after telecommunications company Optus and health insurance provider Medibank were hit by similar cyber attacks.
The major incidents have raised fears of what could be done with the information the attacks have exposed.
The Smith Family says it currently supports around 58,000 poor and disadvantaged students through its Learning for Life program.
What is your reaction to this story? How do you think this will affect crucial funding the charity receives through donations?
Tell us your thoughts and opinions below!
Source: YouTube/7 News Australia