Incident

Firstmac lender reports ransomware attack and data breach


Learn More

Firstmac, an Australian financial services provider, has confirmed a cyber incident where an unauthorized third party accessed parts of its IT system.

Various media sources have already reported on the breach. The EMBARGO randsomware gang has taken responsibility for the attack. The hackers claim to have stolen more than 500 gigabytes of data, including “full databases, source codes, [and] sensitive customer data”. The gang has declared a ransom demand or shared any proof of the hack.

Firstmac has enlisted the assistance of forensic experts to investigate the nature and scope of the incident. The investigation is currently ongoing, and Firstmac has committed to maintaining open communication with all stakeholders.

No details are disclosed about any data breached or number of affected individuals.

Update - as of 10th of May 2024, Firstmac confirmed that the following customer information was compromised:

  • Names
  • Home addresses
  • Phone numbers
  • Dates of birth
  • Passport numbers
  • Medicare numbers
  • Driver's license numbers
  • BSBs
  • Account numbers

Firstmac has assured customers that there is no evidence that any customer accounts or funds were compromised. The exact number of impacted customers has not yet been disclosed.

Firstmac lender reports ransomware attack and data breach