As many as 80,000 South Australian government workers have had their personal details hacked after a cyber attack on an external payroll provider.
Subscribe now for unlimited access.
$0/
(min cost $0)
or signup to continue reading
The government said it was told recently by Frontier Software that the company had been the victim of a ransomware attack.
It said the company then confirmed on Thursday that significant personal information had been stolen from its systems.
"I have been advised that the records of at least 38,000 employees were accessed and that up to 80,000 employees might have been accessed," Treasurer Rob Lucas said.
"The government is currently working with Frontier to try and establish a more accurate estimate."
Mr Lucas said those impacted by the attack could include Premier Steven Marshall and other government MPs along with senior government officials.
The data accessed includes names, tax file numbers, bank account details, dates of birth, payroll information and superannuation contributions.
"These people around the world who are conducting cyber security attacks are persistent and are adept at accessing even the highest security information around the world," the treasurer said.
"It's deeply disappointing. But we do have to bear in mind that we're living in a world where, on a daily basis, we are confronting examples of highly secure information being accessed."
The SA government has been using Frontier Software's payroll services for the past 20 years.
In a statement posted online on Thursday, the company said a forensic investigation into the attack had confirmed "some data exfiltration".
"Our investigations into this incident are ongoing, and we will continue to communicate any relevant new findings to our customers as a priority," it said.
SA government employees have been advised to contact their financial institutions and monitor statements for any unauthorised transactions.
The government said people should consider adding additional security, by changing passwords or adding two-factor authorisation.
They should also be alert to any emails, text messages or phone calls from people requesting personal or account information, including access to devices.
"The government's priority is the safety and security of every employee affected by this incident and we are doing all we can to provide assistance to impacted employees," Mr Lucas said.
The treasurer said the government had partnered with cybersecurity support service IDCARE to work with employees to develop a response plan and provide personal support throughout the process.
All public sector employees have been sent an email advising of the level of information that was compromised and providing information on how to access help and support.
Mr Lucas said the cyber attack had not impacted the state government's own computer systems in any way.
Australian Associated Press
