14 Mar Security Breach – 14 Mar 2025
People are both an organisation’s greatest asset and biggest cybersecurity risk, with human error playing a role in nearly 70% of breaches, according to Verizon’s Data Breach Investigations Report 2024. Remote work has expanded attack surfaces, increasing user exposure to sophisticated phishing, ransomware and BEC threats. SaaS apps bring risks like unauthorised access, made even more dangerous by the flood of stolen credentials in dark web markets, making user protection crucial. A robust user protection strategy that covers prevention, response and recovery is critical for mitigating these evolving user-related risks.
Recent Breaches
Australia – Australian New Zealand Clinical Trials Registry – Healthcare
Exploit: Hacking
Risk to Business: Moderate: The Australian New Zealand Clinical Trials Registry (ANZCTR) was taken offline on February 28, following a cybersecurity incident on February 24, according to its operator, Sydney University. While no identifiable health data was compromised, exposed details include contact information and passwords. Affected users have been advised to change passwords and stay alert for phishing attempts. The outage has disrupted researchers and scientists, preventing them from registering clinical trials for public transparency. ANZCTR, the region’s largest registry, reports trial details to the WHO’s International Clinical Trials Registry Platform (ICTRP). Sydney University has assured that there is no ongoing threat to its systems and has recommended that researchers use alternative registries until ANZCTR is restored.
Australia – Bis Industries – Mining
Exploit: Hacking
Risk to Business: Moderate: Australian mining equipment supplier Bis Industries is investigating claims that hackers stole 502GB of data during a December 2024 ransomware attack. The RansomHub cybercrime gang listed the company on its darknet leak site on February 17, where the post has been viewed over 7,000 times. Bis confirmed that an unauthorised third party accessed and encrypted part of its IT system in December and is now working with cybersecurity experts to assess whether data was stolen. The company, which supplies coal mining equipment and services under its UGM brand, has not disclosed the nature of the compromised data. The investigation is ongoing.
Talk to a TCT team member today about implementing cyber security plan for your business.
Robert Brown
14/03/2025
Related Articles:
How Password Managers Protect Your Accounts
Protecting Your Company from AI Data Breaches