Australia's IPH reveals data breach originated from member firm's systems (updated)

IPH

17/04/2023 09:39

(Adds details, background)
       April 17 (Reuters) - Australia's IPH Ltd  IPH.AX  said
on Monday a forensic probe into the data breach last month
revealed that a limited set of data, which originated from
member firm Spruson & Ferguson (Australia), was downloaded by an
unauthorised third-party.
    The intellectual property services provider detected an
unauthorised access to its document management system, which
included administrative and some client documents as well as
correspondence at its head office and two member firms.
    The investigation further suggested there was no evidence
that data stored in any other component of its IT network was
accessed by any unauthorised third-party during the course of
the incident, the company said.
    "Based on this analysis, IPH has determined to notify a
small number of individuals whose personal information was in
the dataset."
    The Sydney-based firm estimated A$2 million ($1.34 million)
to A$2.5 million (pre-tax) to be incurred as non-underlying
costs in its full-year 2023 accounts related to the incident.
    IPH joins a long list of Australian firms reporting
cybersecurity breaches over the past few months, which experts
have attributed to an understaffed cybersecurity industry in the
country.  urn:newsml:reuters.com:*:nL4N31V0V6

($1 = 1.4923 Australian dollars)

 (Reporting by Jaskiran Singh in Bengaluru; editing by Uttaresh
Venkateshwaran)
 ((Jaskiran.Singh@thomsonreuters.com;))