Breachesby GlyphAustralianSuper
Disclosed Apr 4, 2025Unverified
Credential stuffing wave breaches Australian super fund accounts
A wave of credential stuffing attacks hit several Australian superannuation funds including AustralianSuper, Hostplus, REST, Australian Retirement Trust and Insignia; Reuters reported over 20,000 accounts were breached and some members lost savings.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Apr 4, 2025 |
| Attack | Credential stuffing |
| Data exposed | Credentials and tokensFinancialNames |
| Sector | Finance · AU |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.