JohnDe
La dolce vita
- Joined
- 11 March 2020
- Posts
- 3,756
- Reactions
- 5,451
Yeah, a digital monetary system is safe. NOT
After an initial investigation by a specialist third party forensic cyber specialist, Total Tools is understood to have estimated that customer data linked to 38,000 of its shoppers has been illegally compromised.
The compromised data includes names, email addresses, credit card data and log-in details. Total Tools, through its owner Metcash, has alerted the government’s Australian Cyber Security Centre.
Tradies at risk as Total Tools hit with a data leak
Hardware chain Total Tools has suffered a major data leak that is believed to have impacted 38,000 customers covering credit card numbers, email addresses and log-in details, in an act likely committed by professional cyber hackers.
Total Tools, owned by Metcash, has been working on the data leak for a number of days after it first discovered unusual and suspicious activity within its IT systems, The Australian can reveal, and is still investigating the true size and scope of the data leak.
After an initial investigation by a specialist third party forensic cyber specialist, Total Tools is understood to have estimated that customer data linked to 38,000 of its shoppers has been illegally compromised.
The compromised data includes names, email addresses, credit card data and log-in details. Total Tools, through its owner Metcash, has alerted the government’s Australian Cyber Security Centre.
It is believed Total Tools will soon contact its customers altering them to the data breach. Earlier on Thursday, Total Tools’s website was momentarily shut down due to a technical error over the updating of prices, but this had nothing to do the with the data leak.
The hardware chain is run by Richard Murray, the former chief executive of JB Hi-Fi and boss of billionaire Solomon Lew’s Premier Investments’ retail arm.
The company is the latest Australian business to have sensitive data taken in a cyber breach.
In late 2022 publicly-listed health insurer Medibank’s market value collapsed by $1.7bn as hackers linked to an online Russian criminal forum threatened to expose the health records and other sensitive information of millions of Australians.
Eventually the cyber attack, which saw the records of 10 million customers compromised, cost Medibank more than $30m and regulator APRA forced the insurer to set aside a capital adequacy requirement of $250m after “weaknesses” were identified in its IT infrastructure.
Telco Optus was another high-profile victim of data leaks and was later hit with legal action from the Australian Communications and Media Authority, which argued the carrier breached the Telecommunications (Interception and Access) Act 1979. It was later reported in The Australian that data breach cost Optus as much as $140m.
This year about half of Australia’s population was impacted by a cyberattack on MediSecure, an Australian healthcare information service that provides electronic prescriptions and a prescription monitoring service.
Other Australian corporations that suffered data leaks and cyber attacks in recent years included tech company Canva, financial services company Latitude as well as a number of universities and health services.