Security News > 2021 > February > Oxfam Australia investigates data breach after database sold online
Oxfam Australia investigates a suspected data breach after a threat actor claimed to be selling their database belonging on a hacker forum.
Last week, BleepingComputer learned of a threat actor claiming to be selling a database containing the Oxfam Australia contact and donor information for 1.7 million people.
Today, Oxfam Australia told BleepingComputer that they continue to investigate the breach and reported it to the Australian Cyber Security Centre and the Office of the Australian Information Commissioner.
"Late last week, Oxfam Australia was alerted to a suspected data incident. Oxfam immediately launched an investigation and engaged market leading experts to assist in identifying whether data may have been accessed and any impact on its supporters."
"Chief Executive Lyn Morgain said Oxfam Australia had reported the matter to the Australian Cyber Security Centre and the Office of the Australian Information Commissioner while continuing to investigate the suspected incident," disclosed their suspected data incident notification.
Oxfam Australia has told BleepingComputer that it is unknown what data was potentially accessed and how many people were affected.
News URL
Related news
- Rhode Island confirms data breach after Brain Cipher ransomware attack (source)
- Texas Tech University System data breach impacts 1.4 million patients (source)
- Ireland fines Meta $264 million over 2018 Facebook data breach (source)
- New fake Ledger data breach emails try to steal crypto wallets (source)
- Meta Fined €251 Million for 2018 Data Breach Impacting 29 Million Accounts (source)
- 46% of financial institutions had a data breach in the past 24 months (source)
- UN aviation agency investigating possible data breach (source)
- Washington state sues T-Mobile over 2021 data breach security failures (source)
- UN aviation agency confirms recruitment database security breach (source)
- Largest US addiction treatment provider notifies patients of data breach (source)