Personal data of job applicants is at risk after malware infected connected third party's systems @ City of Casey and PageUp

In June 2018, the city council disclosed that they were among a number of Australian organisations who were impacted by a data security incident at a connected third party service provider of human resources technology. The city immediately remov...

Recruitment giant suffers cyber attack and 700,000 jobseekers data is exposed @ Capgemini and Michael Page

Described by the Evening Standard newspaper as "one of the biggest security breaches to hit a British firm" in November 2016 when the company disclosed that 711,000 candidates from China, Netherlands and the UK had been impacted by a data breach after...

Freemium password management service exposes 7 million users' data @ LastPass

In July 2015, the password management company revealed that it had been the victim of a cyberattack, compromising email addresses, password reminders, server per user salts and authentication hashes of 7 million users. According to security commen...

Rogue employee blamed for stealing patient information @ Bupa

In July 2017, the healthcare company suffered a data breach of 108,000 customer records caused by a malicious insider. An employee of its international health insurance division inappropriately copied and removed some customer information. The d...

Third party error leads to blood donor's data leaked @ Australian Red Cross and Precedent Communications

This was Australia's biggest ever breach when it was disclosed in October 2016. The company said that a "one-off human error" by a member of the technical team at a third party that developed and maintained the company's website had allowed unauthori...

Let us do the analysis so you can make the decisions

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...