Breach

(30/08/2024)

Important Notice Regarding a Data Security Incident

We are writing to inform you of a recent data security incident that affects all Adreno customers.

What Happened: On Monday the 12th of August we were contacted by the Australian Cyber Security Centre to notify us that they had identified a data-breach affecting our POS software. From our POS software the hackers managed to access and export customer records, which were subsequently posted for sale on an online hacking forum.

What Information Was Involved: In all cases the customer's name (as per our records) was exposed. Online customers have had their name, shipping address and phone number exposed. In-store customers have had their name and either phone or email exposed, in some cases both. Less than 0.001% of records include Date of Birth - which, in almost all cases, are records belonging to our staff and our Dive Instructors.  NO CREDIT-CARD/PAYMENT INFORMATION WAS GATHERED. We do not store this information.

What We Are Doing: We have taken immediate steps to secure our systems and investigate the incident, including an in-depth examination with the platform from which the data was exfiltrated. We have identified the path that the hackers took to gain access and have implemented tools and policies to mitigate future risk.  We have met with the Office of the Australia Signals Directorate and the ACSC, as well as notified the Office of the Australian Information Commissioner - to whom our communication is ongoing. We are developing processes and policies to de-identify customer data once we are no longer obliged to retain records - however due to our obligations to the ATO and other government agencies we are not allowed to immediately de-identify customer records.

What You Can Do: Below we have added a non-exhaustive list of precautionary measures you can take to help protect yourself from harm.

For More Information: Please fill out the form below and someone from our team will get back to you as soon as we can.

We understand that the security of your personal information is of utmost importance, and we deeply regret any distress or inconvenience this incident may cause. Please know that we are dedicated to supporting you throughout this process, keeping you fully informed, and taking every measure to prevent such incidents from happening again.

Sincerely,
Adreno Ocean Outfitters

PRECAUTIONARY STEPS

Monitor Financial Accounts: Regularly check your bank, credit card, and other financial accounts for any unauthorized activity. Report any suspicious transactions immediately to your financial institution.

Change Passwords: Change passwords for any accounts that may have been affected, especially if you reuse passwords. Use strong, unique passwords for each account.

Enable Two-Factor Authentication: Add an extra layer of security to your online accounts by enabling two-factor authentication wherever possible. This typically requires a second verification step, like a code sent to your phone, in addition to your password.

Be Cautious of Unsolicited Communications: Be wary of emails, phone calls, or text messages asking for personal information or financial details, especially if they seem suspicious or unexpected. Scammers often exploit data breaches to trick people into providing sensitive information.

Place a Credit Freeze or Fraud Alert: Consider placing a credit freeze or fraud alert with the major credit bureaus to restrict access to your credit report and make it more difficult for someone to open new accounts in your name.

Report Identity Theft: If you suspect that your identity has been stolen, report it to the Australian Cyber Security Centre (ACSC) and the relevant authorities. They can provide guidance and support on dealing with identity theft.

Consider Identity Theft Protection Services: These services can help monitor your personal information and alert you to any suspicious activity.