Story image

CommBank says no evidence customer data was compromised in 2016 breach

03 May 2018

The Commonwealth Bank of Australia says there’s no evidence that customer information was compromised in a data breach incident last year and customers don’t need to take any action.

The breach occurred in May 2016 when the bank couldn’t confirm that two magnetic tapes were destroyed, despite being scheduled for destruction.

The tapes were used by a supplier to print bank statements and contained personal information including customer names, addresses, account numbers, and transaction details.

The bank stresses that the tapes did not contain password or PINs, which could be used for fraud. The bank’s own platforms, systems, services, apps, and websites were not compromised.

“We deployed enhanced reporting and ongoing monitoring of customer accounts to ensure customers were protected. These protections are still in place today,” Commonwealth Bank’s acting group executive of Retail Banking Services, Angus Sullivan, says in an email to customers.

 “CommBank offers you a 100% security guarantee against fraud for all your accounts, where you are not at fault. We cover any loss should someone make an unauthorised transaction,” Sullivan says.

The incident paints a clear picture that data breaches don’t necessarily need to be conducted through the internet.

According to ShareRoot, a user-generated content legal rights management software firm, the breach highlights the change in how consumer data will be handled moving forward.

ShareRoot's CEO Noah Abelson-Gertler says the breach also shows that companies collect ‘far more data’ than people realise.

"Consumer consciousness is reaching an abrupt shift. Data sharing, privacy, and breaches, are terms that are getting headlines in newspapers and continue to maintain leading spots on search platforms and social media sites. Bad actors are in the business of hacking into databases and causing breaches because they see the value of the data. The more the breaches, the more the public consciousness increases,” Abelson-Gertler explains.

"There will be more breaches, companies will continue to scramble to improve their data practices, and consumers will keep calling for an overhaul to how companies collect their data and who has control over it."

The Commonwealth Bank offers these tips:

  • Continue using your accounts as you always have.
  • Please remember that CommBank staff will never ask you to divulge your passwords or PINs. We do not send emails with links requesting you to confirm, update or disclose your confidential banking information.
  • If you have questions or would like to discuss, please call us at 1800 316 433.
  • If you would like to find more information you can visit www.commbank.com.au/customerassurance

“I want to apologise for any concern this incident may have caused. If there is any change in circumstances I will let you know,” Sullivan concludes.

Universal Robots aims for A/NZ growth with new hire
Peter Hern takes on the role of leading customer support, sales and partner development for Universal Robots in Australia and New Zealand.
Microsoft urges organisations to tackle data blindspots
Despite significant focus placed on CX transformation, over a third of Australian organisations claimed that more than one in five of their projects failed.
Raising the stakes: McAfee’s predictions for cybersecurity
Security teams and solutions will have to contend with synergistic threats, increasingly backed by artificial intelligence to avoid detection.
Renesas develops 28nm MCU with virtualisation-assisted functions
The MCU features four 600 megahertz CPUs with a lock-step mechanism and a large 16 MB flash memory capacity.
DOCOMO ranked world's top mobile operator in 5G SEP applications
NTT DOCOMO has been ranked the world's leading mobile operator in terms of applications for candidate standard-essential patents.
Exclusive: Ping Identity on security risk mitigation
“Effective security controls are measured and defined by the direct mitigation of inherent and residual risk.”
CylancePROTECT now available on AWS Marketplace
Customers now have access to CylancePROTECT for AI-driven protection across all Windows, Mac, and Linux (including Amazon Linux) instances.
Gartner’s top 10 data and analytics trends for 2019
Data is the fuel for the modern world, and analytics the engine. Gartner has compiled the top 10 trends to watch this year.