Latitude Financial (ASX: LFS) updated the Australian Stock Exchange that it had detected unusual activity on its systems over the last few days that appears to be a sophisticated and malicious cyber-attack. The activity is believed to have originated from a major vendor used by Latitude. 

​

While Latitude took immediate action, the attacker was able to obtain Latitude employee login credentials before the incident was isolated. The attacker appears to have used the employee login credentials to steal personal information that was held by two other service providers.

​

As of today, Latitude understands that approximately 103,000 identification documents, more than 97% of which are copies of drivers’ licences, were stolen from the first service provider. Approximately 225,000 customer records were also stolen from the second service provider. Latitude apologises to the impacted customers and is taking immediate steps to contact them. 

​

The following notice was sent by Latitude to its customers, according to the company:

​

"We’re writing to you directly to update you on a recent cyber-attack that Latitude Financial is actively responding to. Regrettably, the attack has resulted in the theft of some customer data.

​

The attacker appears to have stolen personal information that was held by two Latitude service providers, impacting customers across both Australia and New Zealand.

​

As of today, we understand that approximately 103,000 identification documents, more than 97% of which are copies of drivers’ licenses, were stolen from one service provider. Approximately 225,000 customer records were stolen from a second service provider.

​

Latitude apologises to its customers, particularly those who were impacted. Please be assured we will contact you directly if your personal information has been disclosed.

​

We are working with the relevant authorities and have engaged cyber security specialists as we continue to do everything in our power to contain the attack.

​

As a valued Latitude customer, we thank you for your understanding and patience. Our services remain available and you should have confidence in using them.

​

Please continue to monitor Latitude’s website where we will be publishing further information as it becomes available.

​

Andrew Walduck
Chief Operating Officer"