Are data breaches the new normal?

It seems that you can't turn on the news anymore without coming across a story about a cyber breach. 

We all want to make sure we are not the next front page headline about data being breached or hacked, nor do we want to be the practice owner who has to tell their clients their data has been released on the dark web, because let's face it, we collect some sensitive data about our clients. 

We have seen Optus, Medibank, and Service NSW, all announce breaches, and on Monday (13 May 2024) it was IRESS that reported to their clients and the ASX that they had 'detected and contained' an unauthorised access of their third party repository space on GitHub, which is used to manage its pre-production software code before it goes into production.  IRESS has advised there is no client data stored on GitHub.

 Following this initial announcement, and as a result of their investigations, it has since been discovered that a credential within the IRESS GitHub space was stolen and was used to gain access to IRESS' OneVue production environment. IRESS are now investigating the extent and nature of the data accessed, as the OneVue production environment does contain client data. 

At this point in time there is no evidence that XPLAN data has been accessed.  See the fact sheet from IRESS here.

 What it all comes down to is making sure we have done the most we can do to make sure our client's data is as secure as it can be.  The easiest way to do this is by implementing two-factor authentication on your XPLAN site, providing an additional layer of security, and an extra level of complexity for anyone trying to break in.

You can read the Enzumo blog about the benefits of 2FA here.

 Enzumo Support has the tools to help you set up 2FA on your XPLAN site, so contact us now to discuss your options - hello@enzumo.com