Weathering the storm: Cybersecurity and managing information in the wake of the Optus & Medibank privacy data breaches

0
145

Historically, businesses have kept documents to ‘be on the safe side’. But, as we now see in the wake of last year’s Optus and Medibank data breaches, this approach is not without its risks. As we rely more and more on computers and networks for our day-to-day business activities, so too does the sophistication, frequency and harm of cyber incidents grow. In this article, we explore the various legislative requirements that cover the collection, security and retention of information, and the lessons emerging from the Optus and Medibank data breaches.

High-profile data breaches

While investigations are ongoing into the Optus and Medibank data breaches, we all know someone who has been affected. But these are certainly not the first high profile hacks to expose very personal information of Australians.

  • In 2018, the Australian National University fell victim to a highly sophisticated spear-phishing cyber-attack affecting 200,000 students, where sensitive information dating back 19 years was accessed, including names, addresses, phone numbers, dates of birth, emergency contact details, tax file numbers, payroll information, bank account details and student academic results.
  • In…
  • Read More…