In a recent notification, the Department of Home Affairs informed individuals about a significant cybersecurity breach affecting ZircoDATA, the parent company of The Migration Translators (TMT), which operates the Free Translating Service (FTS). This service allows eligible visa holders to translate critical personal documents into English. Unfortunately, this incident has resulted in the exposure of personal information for individuals who previously used the FTS.
Overview of the Incident
In February 2024, ZircoDATA identified suspicious activity within its network. Upon discovery, the company engaged cybersecurity experts to investigate the issue, which revealed that an unauthorised third party accessed their files and extracted data. This data was then published on the dark web in March 2024. Initially, ZircoDATA believed that clients who used the FTS were not impacted. However, following further investigation, it was discovered that documents linked to the Department of Home Affairs, which contained personal details, were indeed compromised.
ZircoDATA notified the department in July 2024, at which point immediate steps were taken to inform affected individuals. Although the Department of Home Affairs’ own systems were not affected by the breach, ZircoDATA accepted the department’s assistance in notifying impacted individuals.
Types of Information Compromised
The breach potentially involved various types of personal information, including:
- Full name
- Date of birth
- Contact details (mobile number and email address)
- Visa details (application number, visa grant number, delivery date, and subclass number)
- Driver licence information
- Passport details
If you have used the FTS and suspect your information was compromised, you can contact ZircoDATA at [email protected] for further details.
Actions Taken by ZircoDATA
Following the breach, ZircoDATA worked swiftly to contain the threat and investigate the scope of the incident. They have since reported the matter to relevant authorities, including the Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and law enforcement agencies.
What Can Affected Individuals Do?
To mitigate potential harm, the Department of Home Affairs has provided a series of recommendations:
- Be cautious of scams: Be alert to potential phishing scams and avoid clicking on suspicious links or providing personal information.
- Enhance online security: Enable multi-factor authentication and update your passwords.
- Install security software: Ensure your devices are protected with updated antivirus software.
- Monitor financial records: Consider obtaining a free annual credit report or applying for a credit report ban.
- Passport and driver licence information: Seek advice from relevant government agencies to protect your identity.
Further Support
ZircoDATA has committed to reviewing any requests for credit monitoring services or reimbursement for the replacement of compromised identification documents on a case-by-case basis. Affected individuals are encouraged to contact ZircoDATA directly at [email protected] for assistance.
Conclusion
Both the Department of Home Affairs and ZircoDATA have expressed regret over the incident and the potential inconvenience caused. If you have any further questions regarding the breach, ZircoDATA is available to assist with any concerns.
This incident underscores the growing importance of robust cybersecurity measures and the need for individuals to remain vigilant about the safety of their personal information online.
