CTARS data breach: 12K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2022-05-31
In May 2022, the client management system for the Australian government's NDIS (National Disability Insurance Scheme) suffered a data breach which was subsequently posted to an online hacking forum. The CTARS cloud platform is used by care providers to record information about NDIS participants and often contains sensitive medical information. Impacted data includes over 12k unique email addresses, physical addresses, names, dates of birth, phone numbers and data related to patient conditions and treatments. Exposed data: dates of birth, email addresses, genders, names, passwords, personal health data, phone numbers, physical addresses, salutations, usernames. The breach dates from May 21, 2021; Have I Been Pwned loaded it on May 31, 2022.
What to do
- If you had a CTARS account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
