Competenz Cyber-Attack: Data Theft and Incident Response

Strategic Insights -

In June 2024, a cyber-attack was launched against training organization Competenz, resulting in unauthorized access to its IT system and the theft of sensitive personal information. The organization immediately notified its learners, stakeholders, and relevant authorities, and has since been working to contain the breach and inform those affected.

Key Takeaways:

  • Competenz experienced a cyber-attack in June 2024, resulting in the unauthorized access to its IT system and data theft.
  • The stolen data includes personal information of past and present learners, employers, assessors, staff, and business partners, including names, contact details, dates of birth, identity documents, and financial information.
  • Competenz isolated the affected systems, put in place systems to enhance cyber security resilience, and has been providing updates to learners and stakeholders about the breach and taking precautions to protect personal details.
  • The organization has been attempting to individually notify those affected and has recommended steps to safeguard personal information, including monitoring accounts, checking credit records, and updating security measures.
  • Affected individuals have the right to make a complaint to Competenz or the Office of the Privacy Commissioner.
  • Competenz is sorry to those affected and recognizes the impact of the theft of personal information.

Statistics:

  • The types of personal information stolen include:

+ Names

+ Contact details

+ Dates of birth

+ Copies of identity documents (e.g., passports, birth certificates, driver's licenses, citizenship, residence, and visas)

+ Other information regarding students and employees

+ Financial information, including card and bank account numbers

  • Competenz has notified its learners, stakeholders, and relevant authorities about the breach.
  • The organization has put in place systems to enhance cyber security resilience.
  • Affected individuals have been informed of the breach and have been provided with steps to take to safeguard their personal information.

Sources:

  • Competenz. (n.d.). Updates - Competenz. Retrieved from https://www.competenz.org.nz/updates/cyber-incident
  • Competenz. (n.d.). Cyber Incident. Retrieved from https://www.competenz.org.nz/updates/cyber-incident
  • Department of Internal Affairs. (n.d.). Identity theft online checklist. Retrieved from [internal website URL]