Share this article on:
Superannuation fund NGS Super has announced that it suffered from a cyber attack that saw “limited data” stolen.
The financial institution said it had discovered that threat actors had briefly accessed some of its systems last Friday, 17 March.
NGS said it was quick to shut down its systems to prevent further access and has begun investigating the incident.
“We also launched comprehensive cyber security protocols and enhanced network monitoring,” the company said in a media release.
While investigations to date have revealed that limited data was taken in the attack, NGS has reiterated that member super savings and fund assets are located on a separate platform and remain secure.
“We can confirm that your super savings are secure and have been secure at all times,” it said.
The company has also said that those whose data was accessed in the attack will be reached out to with further communications.
“We would like to emphasise that NGS takes cyber security and privacy of all personal information seriously,” it added.
“We sincerely apologise this has happened. You can be assured we remain highly alert and continue to monitor our systems for signs of any suspicious activity.”
The number of customers affected by the “limited data” that was compromised has not been revealed, with NGS Super saying it was unable to publicly disclose the exact number of people affected or any information regarding the type of information that was accessed.
The company, who announced news of the breach on 24 March, a full week after the hack, has defended itself against criticism of the delay, saying that it placed its focus entirely on the incident and ensuring the security of its systems and customer data.
“The cyber crime environment is becoming increasingly sophisticated, and it is typical that investigations of this kind, which are complex, take a substantial time to complete.
“In the interests of protecting its members, NGS has been committed to a thorough investigation that leads to accurate findings.
“We communicated with you as soon as we understood the impact of the incident on members.
“We are continuing to communicate with all impacted members and will be providing everyone with the necessary services and support.”