Macquarrie breach traced to external technology provider, Storm lists victim

Macquarrie Corporation, a 20-person diesel engine and machinery services company in Port Melbourne, said a cybersecurity incident at one of its external technology providers gave attackers unauthorised access to certain systems used by the business. The Storm ransomware group listed Macquarrie on its leak site on September 1 and set a September 16 publication deadline, publishing an employee passport scan, a death certificate, company correspondence, customer data and credit listings as proof. Macquarrie said it secured affected systems, engaged independent specialists and moved operations to arrangements independent of the affected provider. It is notifying affected individuals and liaising with the Australian Cyber Security Centre and the Office of the Australian Information Commissioner.