Australian law firm HWL has been working to contain the data breach from April 2023, as the time line becomes clearer.

← Back to Blog

Australian law firm HWL has been working to contain the data breach from April 2023, as the time line becomes clearer. The breach took place in April, it has been confirmed that one client is the Australian Defense force, the Australian data commissionaire (OAIC) has confirmed it has also had data stolen.

Reportedly with clients including the Prime Minister and Cabinet, Treasury, Finance, the Parliamentary Budget Office, Australian Securities and Investments Commission (ASIC), and Services Australia. It may explain why it has taken some time to fully communicate the incident.

‘HWL Ebsworth obtained an injunction from the Supreme Court prohibiting the hackers and any third parties, which would include media and clients, from publishing or promoting any further material from the leaked data.

According to the affidavit, at least nine clients and two service providers have downloaded and searched through the leaked data.’ An action that maybe more symbolic and protocol than having a real effect, with the data now out in the wild.

In this case the hack demonstrates the impact of an attack on a third party supplier and the challenges with containing its consequences. Law firms are a rich source of sensitive, confidential and personal information.

Ted Dziekanowski Stephen Pitt-Walker, JD, FGIA Jamie Foster Rachel V. Rose, JD, MBA

#cybersecurity #cyberriskmanagement #cyberattack

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7076451576126525441