✅ RESOLVED - Issue with previewing and sending payslips from Reckon One

Luke

Hi All

We are investigating reports where some customers may be able to view payslips of employees outside their payroll. To safeguard data privacy, we have temporarily disabled payslip preview and sending features while we investigate.

We apologise for the inconvenience and are working to resolve this as quickly as possible.

Updates will be posted in this thread as they come to hand.

✅ THIS ISSUE IS RESOLVED - PLEASE CLICK HERE FOR THE LATEST UPDATE

Rav

ℹ️ UPDATE

Morning everyone

Just wanted to provide a quick little update to let you know we're continuing to investigate this at the highest priority. We're currently looking into a potential cause that we believe may have contributed to the behaviour some users experienced with payslips yesterday afternoon.

We've temporarily disabled the ability to send payslips from Reckon Payroll at the current time just so we don't cause any unintended confusion while we diagnose and address the underlying issue.

We'll keep this announcement updated with more information as soon as it becomes available.

Thank you all for your patience so far and our sincere apologies for the inconvenience this has caused so far.

727019

I'm concerned about the security breach this causes, how will we know if anyone has accessed our employee's data? Is this being looked into also?

Rav

✅ UPDATE - ISSUE RESOLVED

Just sharing another update regarding the payslip issue that occurred yesterday in Reckon Payroll. After completing our investigation, we’re very happy to report that the issue has been fully resolved.

Here’s what you need to know:

• A fix has been developed and implemented into Reckon Payroll which has fully resolved the issue and everything is now back to normal.
  
• You can view and send pay slips as usual without any issues.
  
• This issue only impacted a very small number of users. If you were directly affected, we’ll reach out to you separately via email with more details.
  

We sincerely apologise for any inconvenience this might have caused and thank you all for your patience and understanding as we worked to address it.

If you have any further questions or need help, please feel free to leave a reply below and we'll do our best to assist.

727019

After receiving your email Important Notice? Pay Slip Data issue, I called the 1300 number and spoke to Arpan who advised me that this incident has been reported cyber.gov.au - I require this in writing inline with our company Data Breach Policy. Also can you advise when we will be contacted confirming either way if our information has been breached. This is a very serious incident and urgent action is required. My email is admin@iomarine.com I look forward to your urgent response.

Rav

Hi @727019

I just flicked through a reply on your other post but I'll just copy it below as well just for consistency.

I apologise but I think the team member you spoke to may have been a tad confused on this as the above info they've advised is not correct. The information relating to cyber.gov.au in the email you received earlier today was more referring to general cybersecurity best practices.

In regard to the payslip issue itself, it came to our attention that a very small number of Reckon Payroll users were able to view payslips for employee outside their own payroll as announced in this post. Our teams immediately took action after the first reports of this and as a precautionary measure, the ability to view and send payslips was disabled for all users while we conducted a thorough investigation.

The issue itself has been resolved earlier today and full payslip functionality has been restored to Reckon Payroll.

We have identified and contacted all customers who were impacted by this issue by email which is what you've received. Your data is safe and there have been no further reports of this issue and we are very closely monitoring the service.

Apologies for the confusion caused around the information provided on your call. We've been in touch with our teams internally to clear up any confusion around this and ensure we're communicating accurately.

If you have any questions around this, please let me know.