Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

14 Million Records Stolen in Data Breach at Latitude Financial Services

Australian financial services provider Latitude says roughly 14 million user records were stolen in a recent cyberattack.

Australian financial services company Latitude Financial Services now says that roughly 14 million records were stolen in a cyberattack earlier this month.

The incident was disclosed in mid-March, when the company started notifying roughly 300,000 customers of a data breach impacting their personal information.

In an updated notification, the company this week announced that the incident, which has caused service disruptions, was bigger than initially determined.

Initially, the company said that the data breach occurred at two service providers. On March 16, however, the attackers compromised Latitude’s network, prompting the company to disconnect some systems to contain the incident.

“Once the attack was discovered, we took immediate and decisive action, including isolating systems, taking them offline to protect personal information. Unfortunately, this action continues to cause disruption to our services,” the company says.

The data breach resulted in the compromise of the personal information of current and past customers, and applicants in Australia and New Zealand, Latitude says.

The attackers stole roughly 7.9 million driver license numbers, including 3.2 million that were provided to the company over the past ten years. In addition, the attackers stole 6.1 million other records, including 5.7 million that were provided between (at least) 2005 and 2013.

“These records include some but not all of the following personal information: name, address, telephone, date of birth,” the company says.

Advertisement. Scroll to continue reading.

The attackers also exfiltrated roughly 53,000 passport numbers and monthly financial statements for less than 100 customers.

“We are writing to all customers, past customers and applicants whose information was compromised outlining details of the information stolen and our plans for remediation,” the company notes.

Latitude has not shared details on the type of cyberattack it fell victim to. The fact that it took systems offline to contain the incident, however, suggests that it may have been a ransomware attack.

Headquartered in Melbourne, Latitude is a subsidiary of Deutsche Bank and KKE and the largest non-bank lender of consumer credit in Australia. In New Zealand, the company offers financial services under the brand Gem Finance.

Related: GoAnywhere Zero-Day Attack Hits Major Orgs

Related: NBA Notifying Individuals of Data Breach at Mailing Services Provider

Related: Data Breach at Independent Living Systems Impacts 4 Million Individuals

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Understand how to go beyond effectively communicating new security strategies and recommendations.

Register

Join us for an in depth exploration of the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects.

Register

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

KFC and Taco Bell parent company Yum Brands says personal information was compromised in a January 2023 ransomware attack.