[ad_1]
The personal details of a million Australians may have been exposed in a data breach involving ClubsNSW, according to a bombshell report by Daily Telegraph in Thursday.
Australia-based technology company OutABox, located in Sydney, may have shared information with a foreign developer in the process of creating hospitality and gaming products, according to the report.
Patrons are often required to provide driver’s license details, signatures and addresses to register with ClubsNSW – information that is held by the company and is now believed to have been compromised.
Stream Sunrise Free on 7 plus 
NSW Police are investigating the reported leak, which is said to have affected clubs including City of Sydney RSL, Central Coast Leagues Club in Gosford, Fairfield RSL and Ingleburn RSL Club, among others.
On Thursday, Sunrise presenter Monique Wright explained that a number of high-profile political figures were also believed to be involved in the potential gaffe.
“Millions of patrons of popular NSW pubs and clubs have been warned that their personal information may have been shared in an online data breach,” Wright said.
“It is understood that email addresses, signatures, dates of birth, phone numbers and even driver’s license photos may have been shared internationally.
“More than a dozen locations across the state were affected, putting visitors at risk of identity theft.”
The full list of affected locations is available at haveibeeoutaboxed.com.
ClubsNSW told 7NEWS on Thursday it had been notified of a cyber security incident.
“ClubsNSW has been made aware of a cyber security incident involving a third party IT provider commonly used by hospitality venues including less than 20 clubs,” it said.
“Although limited information is known at this time, we understand that some personal data of club patrons who use this IT provider may have been compromised.” The respective clubs are working to notify all affected patrons.
“We can inform you that the relevant authorities have been notified by the third party IT provider and the NSW Government has also been notified.
“ClubsNSW is deeply concerned about the security of the data that was the subject of the breach.
“We have met with all affected clubs today and are providing all the support we can, noting again that the incident involved a third party supplier.
“We would like to reassure club members that further updates will be provided once further details are confirmed. In the meantime, club patrons are advised to be extra careful when reviewing emails or texts and to avoid clicking on suspicious or unfamiliar links.
OutABox acknowledged that a “potential breach” had occurred in a statement on its website.
“Outabox has become aware of a potential data breach by an unauthorized third party of a login system used by our customers,” it said.
“We are working as a priority to establish the facts surrounding this incident, have notified the relevant authorities and are investigating in cooperation with law enforcement.”
“We are limited in how much information we can provide at this stage given that an active police investigation is currently taking place.
“We will provide further details as soon as we can. We understand that this news may cause concern for our staff, clients and their customers, and we thank them for their support and patience as we work to resolve this as quickly as possible.”
[ad_2]
