NGS Super, an industry superannuation fund that serves the education and community sectors, has reported a data breach where an attacker was able to steal “limited data” from its systems.
The incident was detected and shut down on March 17, but not before the attacker had exfiltrated some data. The stolen data was stored on “internal drives,” and the fund will investigate why it was stored there.
The fund stated that it couldn’t publicly disclose the number of impacted customers or the types of information impacted, but they will directly communicate with any members affected. NGS Super assured its members that their super savings and the fund’s assets remained secure on a separate platform.
The fund has conducted a “comprehensive forensic investigation” and taken necessary steps to update the security of its systems. The delay in disclosing the incident was because NGS Super wanted to ensure its systems were secure before making a public announcement.
The fund stated that it had not seen any evidence of stolen data being leaked but that it was continuously monitoring the situation and providing necessary support to impacted members.
