Update on Friday, 2 August 2024

Subject: Important Update from Canberra Tradesmen's Union Club 

Dear Valued Members,

We write to provide you with an update on the cyber incident that impacted clubs and one of our former external service providers identified on 29 April 2024, which has impacted Canberra Tradesmen’s Union Club.

We have engaged in regular discussions with the service provider to seek further information to assist us with our investigations and assessment of the incident. We have now received further substantial information to assist with our understanding of and investigations into the incident.

Based on the further information received and our investigations to date, it is important to note that:

  • we understand that our sign-in system and associated data was impacted and subject to unauthorised access;

  • the individual believed to be behind the incident is known and has been arrested and charged, with their assets seized;

  • the background circumstances of the matter suggest the individual’s motivations were not to misuse any personal information that they accessed without authorisation;

  • the information that was subject to unauthorised access included name and contact information, photo, identity information including dates of birth, scanned driver’s licences or proof of age cards, membership details, visiting timestamps and gaming information;

  • significantly, the information that was viewable via the website was limited to name, club visited, birth year, and limited address details (town, state and postcode); it did not include any other information, including any other identity information such as drivers’ licence details, dates of birth, visiting timestamps or gaming information;

  • there is no indication that any other information was publicly disclosed nor accessible;

  • the website that initially allowed limited information to be viewed is no longer accessible.

The above matters support the view that individuals are not at risk.

Our organisation is taking proactive internal steps to further safeguard against future incidents. This includes a thorough review of our IT security and internal data policies, as well as the enhancement of our existing cybersecurity measures. It is important to note that there were no breaches in our own IT security systems.

As always, we continue to ask, as a general precaution, that you please remain vigilant and monitor for any suspicious activity, including any communications by phone or email requesting for information or payments. Further information about online safety, cyber security and other helpful tips can be found at the Australian Cyber Security Centre website or the ACCC's Scamwatch website.  

We sincerely thank you for your patience and cooperation during this pressing and disruptive time.

We also want to take this opportunity to apologise for the stress this incident may have caused. We greatly value and appreciate the support and feedback we have received from our members throughout this process.

If you have any questions, please contact us at Canberra Tradesmen’s Union Club via email on privacymanager@thetradies.com.au.  

Regards

Alison Percival
Chief Executive Officer
The Canberra Tradesmen’s Union Club