Data theft at JewishCare

JewishCare, a health services company operating in New South Wales, Australia, which provides health care to Australia's Jewish communities, announced in a statement on November 12th that it had suffered a cybersecurity incident.

On October 28th, JewishCare NSW detected that its systems may have been compromised and its data published on the Dark Web. The company mobilised teams of cybersecurity experts and partners to investigate the incident and the affected data, working with federal and state authorities including the Australian Cyber Security Centre (ACSC), Australian Federal Police, NSW Police, the National Cyber Security Office (NOCS) and the Office of the Australian Information Commissioner (OAIC).

The stolen data affects clients, donors, volunteers, employees and suppliers. In addition, depending on the affected group of the above, the data stolen varies. For example, personal data was stolen from customers, donors and employees, while payment addresses were obtained from suppliers.