Melbourne IT launches investigation into AAPT data breach
- 27 July, 2012 16:13
Melbourne IT has confirmed that it is investigating the data breach which affected its customer, AAPT, earlier this week and reports that the incident was isolated with only a small number of servers affected.
Some AAPT business customer data stored on servers in Melbourne was accessed in the attack. According to AAPT CEO, David Yuile, preliminary findings suggested it was two files that were compromised and the data was historic, with limited personal customer information.
Hacktivist group, Anonymous, is believed to be behind the attack which was undertaken in reaction to the Australian Government’s proposed data retention laws. According to a message posted on Twitter by AnonPR, members of the group will be releasing the 40GB of data taken from AAPT’s servers on Saturday, 28 July.
Melbourne IT chief executive, Theo Hnarakis, told CIO Australia that the incident was related to a specific vulnerability which only affected a small number of servers.
“We believe this was an isolated incident however we are treating the matter extremely seriously and are undertaking multiple additional scans across our entire infrastructure base which includes a large number of servers,” he said.
Hnarakis added that the scans, being undertaken to identify any other potential vulnerabilities, will take time as the scans triple-check its environment as an additional precaution.
“We are progressing this work as quickly as possible while minimising any load impact to customer websites,” he said.
Since the incident was detected and investigations have been in progress, Hnarakis said that Melbourne IT has taken additional steps to further strengthen security measures.
“Our security posture will remain in a high state of readiness for the foreseeable future as the potential for further attacks on [Australian] Government and internet service provider [ISP] websites remains.”
IDC Australia senior market analyst, Vern Hue, said that Australian ISPs should be stepping up security and ensuring that there is proper patching in place.
“Organisations also need to go back to basics and perform penetration testing that mimics how malicious agents would seek ways to exploit inherent vulnerabilities,” he said.
Hue added that the actions of Anonymous would strengthen the Australian Government’s resolve to pass data retention laws which are currently under discussion by the Parliamentary Joint Committee on Intelligence and Security (PJCIS).
“I don't think the government will back down on passing the data retention laws as they seem very determined to push this through,” he said.
“Backing off now would be a symbol of victory to Anonymous and I think that's the last thing on the mind of the lawmakers.”
Follow CIO Australia on Twitter: @CIO_Australia
Brace for change: An interview with Tony Hayes of ISACA
Rethinking the worst case
The brand called CIO
Motorola turns to the Moto G's price to reserve its smartphone fortunes
Virtual desktop computing service: The next cloud disruptor?
Eight Simple Steps to Boost Campaign Results Using Predictive Modelling
Marketers today are consumed by big data, struggling to find meaning and under pressure to use that meaningful data in smart ways to boost results. But many organizations are reluctant to try and use predictive modelling in their campaigns, due to unfamiliarity and the dependence on complex tools – yet with modern, marketing-friendly modelling tools, integrated with campaign management, it is easier than you think. This whitepaper demonstrates how predictive modelling plays a critical role in streamlining the selection process.
Efficient Data Management in Three Simple Steps
Gartner reports that Business Intelligence, Mobile Technologies and Cloud Computing rank 1-2-3 as the 2013 Global CIO Technology Priorities. These three trends, labelled the “Perfect Storm” of new technologies, are transforming every link in the IT value chain, promising to deliver more efficient, responsive and dynamic IT operations. But this also means massive shifts in the way IT applications and services are created, deployed and maintained. This whitepaper aims to help you begin the journey to efficient modern data management
San Jose Sharks Score Big with Flash from Pure Storage
Sharks Sports & Entertainment (SSE) owns and operates a number of sports properties, most notably the San Jose Sharks of the National Hockey League. SSE began deploying a VDI environment, however as soon as 10 to 15 VDI users were added, the IT team saw an exponential decrease in performance. In this casestudy, we look at how the company has been able to easily handle the demands on applications without adding new management complexity.