Ann: Cyber Incident, page-25

Some more important background information pertaining the attack.

What happened?

Latitude is experiencing a malicious cyber-attack that has resulted in a data theft.

While Latitude took immediate action, we understand that the attacker, via a vendor, was able to steal Latitude employee login credentials before the incident was contained. The attacker appears to have used the employee login credentials to steal personal information.

We have alerted and are working with relevant authorities and law enforcement agencies, including the Australian Cyber Security Centre, as well as external cyber security specialists.

Latitude also notified the Office of the Australian Information Commissioner (OAIC) about this incident on 16 March 2023.