NSW citizens’ personal data is at risk after nearly 50 email accounts at the department responsible for driver's licences and other services were hacked.
NSW citizens’ personal data is at risk after nearly 50 email accounts at the department responsible for driver's licences and other services were hacked.

Service NSW hacked in major data breach

The email accounts of almost 50 NSW government employees have been breached in a cyber attack on the customer service department, putting the personal data of citizens at risk.

Service NSW launched an investigation on April 22 after discovering a possible breach and found the email accounts of 47 staff had been illegally accessed, the department said on Thursday.

Forensic specialists are analysing the email accounts to find out whether any personal information has been accessed through the phishing attack.

Service NSW chief executive Damon Rees says internal cybersecurity teams stopped the attack and worked to limit the impact on the department's customers and services.

"We are now working as quickly as possible to confirm the scope of this attack on the personal information of our customers," Mr Rees said in a statement on Thursday.

Bondi Junction Service NSW offering hand wash to customers upon entering. Picture: Jane Dempster/The Australian
Bondi Junction Service NSW offering hand wash to customers upon entering. Picture: Jane Dempster/The Australian

The department says access was limited to the content of the 47 email accounts - which relate to over-the-phone or over-the-counter transactions at a Service NSW centre.

"Cybersecurity is incredibly important and we're very sorry that we haven't been able to successfully protect our customers against this complex attack," Mr Rees said.

Service NSW has established a dedicated team to help affected customers and will contact those who are found to have been impacted.

"This is a very complex issue and the analysis and investigation are both ongoing," Mr Rees said.

Individual MyServiceNSW accounts have not been compromised as the stolen data was stored in email records.

Both NSW and federal cybersecurity agencies have been briefed as well as the NSW Information and Privacy Commission.

Originally published as Service NSW hacked in major data breach



REVEALED: What’s in the budget for Bundy projects

Premium Content REVEALED: What’s in the budget for Bundy projects

How the region fared in this year’s State Budget.

PREPARE TO LEAVE: Fire edges closer to Kingfisher

PREPARE TO LEAVE: Fire edges closer to Kingfisher

A warning has been issued by Queensland Fire and Emergency Services

Coal royalties to fall by 53 per cent this financial year

Premium Content Coal royalties to fall by 53 per cent this financial year

Queensland Budget: How COVID-19 has depleted state coffers.