Security breaches are in the headlines more frequently due to cyber-attacks becoming more common. Our Head of Retail Technology, Evgueni Iakhontov, breaks down why these attacks happen, how to prepare and what to do if your data is compromised. <\/p>\n\n\n\n
Hackers have different motivations. Depending on the situation, your data may be safe even after it\u2019s been breached.<\/p>\n\n\n\n
Organisations typically have cyber security measures in place and some hackers may see it as an opportunity to showcase their skillset. Their intent may not be to steal your details but rather to gain notoriety or publicity. In these instances, it\u2019s likely they\u2019d broadcast the attack to either the company itself, the media or online communities. <\/p>\n\n\n\n
You guessed it, these attackers are chasing a profit. The hacker generally obtains valuable data that would cause the company harm if made public \u2013 holding them to ransom in order to regain it. In these instances, the company is the target as opposed to the personal data. <\/p>\n\n\n\n
This one is arguably the most harmful, as it can go unnoticed if companies don\u2019t have the right monitoring tools in place to detect a breach. The objective is the data itself, and the attacker will go to great lengths to ensure they\u2019re undetected for as long as possible. The stolen data is then sold to the highest bidder for other criminals or scammers to use. This is what’s believed to be happening with Optus\u2019 data breach right now<\/a>. We all know that data is valuable, but is it valuable enough to risk criminal charges for? Unfortunately, yes. By knowing just a few details about you, a scammer can steal your identity and do things like:<\/p>\n\n\n\n You can get ahead of the game and set yourself up with extra protection so if you are part of a data breach, you\u2019re less at risk. Here are just a few simple ways to keep yourself safe online: <\/p>\n\n\n\n Never use the same password on more than one platform. Easier said than done, we know. We\u2019ve all thought about smashing the keyboard in frustration trying to remember which password we used for what. That\u2019s where password managers like Bitwarden<\/a>, 1Password<\/a> or LastPass <\/a>can help. These tools generate and save all your passwords, and all you need to remember is one password to access them. <\/p>\n\n\n\n Two-factor authentication makes you identify yourself in two different ways before you can make any changes to your account. The first step is entering your login and password details and the second step is usually verifying your identity with something in your personal possession, like your phone. The most common example of this is receiving an SMS with a unique pin that you need to enter before gaining full access to an account.<\/p>\n\n\n\n Clearscore<\/a> has a free service that notifies you if your passwords have been found on the dark web. You can also subscribe to services like Equifax<\/a>, which offers alerts plus some level of insurance against identity theft, or the CreditSavvy app,<\/a> which helps prevent new credit from being taken out in your name by blocking credit checks. <\/p>\n\n\n\n Scammers are getting smarter and smarter and it\u2019s not just banks they\u2019re targeting. Make a habit of regularly reviewing your expenses and checking for any payments you didn\u2019t make. It\u2019s also wise to keep an eye on your utility accounts for any refunds you didn\u2019t request. If you\u2019re an Origin customer, you can do this in the Bills and payments section of My Account<\/a>. Be sure to contact your provider immediately if you see anything fishy. <\/p>\n\n\n\n These simple steps can help minimise the damage:<\/p>\n\n\n\n Change your password immediately on the platform that\u2019s been compromised. Also make sure all your contact details are still correct such as your name, email and your mobile number. Check your contact details before you change the password, as it\u2019s a common tactic for scammers to change your details to their own.<\/p>\n\n\n\n If you\u2019re concerned that your financial information was involved in a data breach, you can block or replace your debit or credit cards. This can usually be done via your banking app or by contacting your bank. Check for any transactions that you don\u2019t recognise, especially small amounts, and advise your bank immediately should you notice anything suspicious. If you have direct debits set up for your utilities, don\u2019t forget to update your details with your provider. If you\u2019re an Origin customer, you can do this easily in My Account or the app<\/a>.<\/p>\n\n\n\n A credit report ban is a quick and effective way to help avoid fraudulent credit being taken out in your name. Services such as CreditSavvy<\/a> allow you to place a ban on your credit report to temporarily freeze your file so credit checks can\u2019t be completed. It\u2019s completely free. <\/p>\n\n\n\n If there\u2019s a danger your driver\u2019s licence number has been leaked, you should consider contacting the licencing authority in your state for a replacement. <\/p>\n\n\n\n In the worst-case scenario there are services you can reach out to for help: <\/p>\n\n\n\n IDcare<\/a> is a national support centre for victims of identity crime. It\u2019s a free service to assist victims with repairing damage to their reputation, credit history and identity information. For more information visit the IDcare website<\/a> or call 1800 595 160. <\/p>\n\n\n\n If you have been a victim of identity theft, you may be eligible for a Commonwealth Victim\u2019s Certificate<\/a>. It\u2019s a document that you can present to financial institutions or other organisations to support your claim that your identity has been used fraudulently. <\/p>\n\n\n\n These are just a few simple ways you can help protect yourself in the event of a data breach. At Origin, we take our responsibility to keep your personal data safe very seriously, and we <\/em>have a highly experienced team of cyber security experts. We do regular checks of our systems to identify and fix security vulnerabilities, and our <\/em>Bugcrowd bug bounty program<\/em><\/a> rewards cyber security researchers and white hat hackers for finding and reporting vulnerabilities in our software.<\/em> <\/p>\n\n\n\n
Though hackers may have different motivations it\u2019s important to take precautions to minimise the chance of attacks and breaches. <\/p>\n\n\n\nWhy do they want my data anyway?<\/h2>\n\n\n\n
\n
Be prepared in case your data is leaked<\/h2>\n\n\n\n
Choose strong passwords and get a password manager<\/h3>\n\n\n\n
Set up 2FA (two-factor authentication)<\/h3>\n\n\n\n
Use credit and identity protection services<\/h3>\n\n\n\n
Keep an eye on all your accounts<\/h3>\n\n\n\n
My details were in a breach, what do I do?<\/h2>\n\n\n\n
Change your password<\/h3>\n\n\n\n
Consider blocking or replacing your bank cards<\/h3>\n\n\n\n
Get a credit report ban ASAP<\/h3>\n\n\n\n
Replace your driver’s licence<\/h3>\n\n\n\n
Help is available if your identity is stolen<\/h2>\n\n\n\n
IDcare<\/h3>\n\n\n\n
Victims of Commonwealth identity crime<\/h3>\n\n\n\n
\n\n\n\n