What exactly is a data breach and why do hackers do it?
“The law requires [companies] to keep that data while someone remains a customer,” Toby Murray“That data’s valuable to thieves or people who want to commit fraud … you can use it to open a bank account in someone’s name or take out a loan or extort them for money. So there’s a financial motive.”it happened to MyGov in 2020and Telstra in 2021
Why was the Optus data breach so bad?
Dr Brendan Walker-Munro, “This has obviously been horrible for each individual who’s been affected but when you look at it at the macro level this has been an unprecedented About 2.8 million of the 10 million victims100 points of identification“Survivors of domestic violence could’ve had their identities exposed and the new addresses they’ve moved to are now out there in the world,” he said.How did the Optus hack happen?
Kelly Bayer Rosmarinmistake had occurred“Often they result from a fairly simple problem with the systems that are storing all this data,” Murray said. “They had a system that was storing all this sensitive information … which was connected to the internet and seemingly anyone could access this.”“The customer would just be a number, and by putting in different numbers you got different details of different customers. The attackers doing this 10 million times ended up getting the details of 10 million customers,” he said. “In a good system, you have access control which makes sure people are only able to view the data they need to for their job or as a customer, and you also have proper authentication that someone [has to prove] who they are claiming to be.What are the current Australian laws around data protection and are they adequate?
Privacy Act“Obligations [are] in relation to how companies can collect personal information and then how they have to store it, how they have to treat it, and then at the end of that lifecycle what companies that are finished with that information should do in terms of destruction or deidentifying or getting rid on information they no longer need,” Walker-Munro said.“Telecommunications laws also impose specific requirements. Telcos have to make their best efforts to prevent unauthorised interference or access to information the telecommunications company has.”to make a company like Optus sit up and take notice”.In the European Union, fines are percentages of the company’s annual income instead of blanket rates. But Walker-Munro argued reactionary punishments don’t always incentivise companies to implement the proper protections in the first place.How likely is it another major cyberattack will happen in Australia?
“Unfortunately these things are going to happen and the laws need to be there to ensure companies are taking their best steps before [they do],” Walker-Munro said.“There’s a part for government to play here where they really need to be coming in and providing transparency and clarity to companies and saying ‘these are the standards we require you to meet, if you’re not going to meet them, don’t operate in Australia’.“It’s probably the uncomfortable conversations we should be having.”The post Yr 5-Min Explainer On How The Optus Data Breach Happened And The Likelihood Of More Attacks appeared first on PEDESTRIAN.TV .
