Written by
Transport for NSW has confirmed its Authorized Check Scheme (AIS) online application was affected by a network issue in early April.
AIS authorizes inspectors to inspect vehicles to ensure a minimum safety standard. To become an authorized surveyor, it is necessary to submit an online application and ask the candidate to share personal information including full name, address, phone number, email address, date of birth and driver’s license number. car.
According to Transport for NSW, the incident saw a third party successfully gain unauthorized access to a “small number” of the app’s user accounts.
“We recognize that data privacy is paramount and deeply regret that customers could have been impacted by this attack,” Transport for NSW said.
“Scammers may try to take advantage of these events. Customers should not respond to unsolicited phone calls, emails or text messages from anyone claiming to be from the relevant Transport for NSW. to any security issues.”
Transport for NSW said it was notifying the judges affected separately and would provide options to help them avoid further impact from the incident.
In addition, security measures have also been put in place, the Department of Transport for NSW assures and emphasizes that monitoring of the application continues.
This latest breach comes just over a year after the Department for Transport for NSW said it was being affected by a cyber attack on the Accelion-owned file transfer system.
The Accelion system has been widely used for file sharing and storage by organizations around the world, including Transport for NSW.
At the end of last year, state auditor Margaret Crawfound No NSW main cluster agency found – including Transportation – has implemented all Essential Eight controls, which is cause for “significant concern”.
“The key factors for strengthening governance, control, and a cybersecurity culture are not strong enough and not consistently applied. There hasn’t been enough progress to improve cybersecurity protections across agencies. NSW government”, the auditor general wrote in a standard report [PDF] on the state’s ability to ensure network security.
Relevant scope
