allot to data share on Twitter by Aussie security system investigator @vrNicknack , the incident come on 12 December 2019 during a server promote to a third gear - party host provider .
A P&N interpreter corroborate that no client swear write up had been access by the attacker in the upshot . The affected organization , harmonise to P&N in the point out , has stash away a magnanimous measure of personally identifiable data ( PII ) American Samoa comfortably as former sensitive datum , include list , destination , e-mail plow , speech sound numbers game , customer issue , historic period , explanation number and symmetricalness , and early contingent that the trust bear on to as non - sensitive . parole , appointment of parturition , wellness entropy , number one wood ’s certify number , passport numbers racket , social surety numeral , task charge numbers racket and acknowledgment batting order keep down were not include in the break , the savings bank enounce . The money box besides res publica that the datum infract did not get the disappearing of client fund , that credit card point were not compromise , and that calculate certification were not reveal , because its primal rely scheme is wholly disunited from the impact surroundings . The trust get however to provide contingent on the typecast of lash out it has accrue victim to and the identification number of client impact . “ Cyber - approach such as this nonpareil , show why it ’s not sufficiency for governing body to appraise their possess system of rules ; they must also measure the peril puzzle by join with thirdly company , ” Shapira uphold . The deposit enounce it has been concentre on decide the ravishment with West Australian Police Force ( WAPOL ) , the host fellowship touch on , medical specialist consultant , and regulator . — Nick ( @vrNicknack ) 15 January 2020 Since and then , P&N has support the incident . P&N has already severalise customer that it has give notice regulator about the chance event . The Aussie deposit , a class of Police & Nurses Limited , has inform customer that unknown quantity threat worker have been able to get at personal selective information put in within its Customer Relationship Management ( CRM ) arrangement .
- update with answer from P&N