Pay Slip Data Issue

727019

After receiving your email Important Notice? Pay Slip Data issue, I called the 1300 number and spoke to Arpan who advised me that this incident has been reported cyber.gov.au - I require this in writing inline with our company Data Breach Policy. Also can you advise when we will be contacted confirming either way if our information has been breached. This is a very serious incident and urgent action is required. My email is admin@iomarine.com I look forward to your urgent response.

Rav

Hi @727019

I apologise but I think the team member you spoke to may have been a tad confused on this as the above info they've advised is not correct. The information relating to cyber.gov.au in the email you received earlier today was more referring to general cybersecurity best practices.

In regard to the payslip issue itself, it came to our attention that a very small number of Reckon Payroll users were able to view payslips for employee outside their own payroll as announced here. Our teams immediately took action after the first reports of this and as a precautionary measure, the ability to view and send payslips was disabled for all users while we conducted a thorough investigation.

The issue itself has been resolved earlier today and full payslip functionality has been restored to Reckon Payroll.

We have identified and contacted all customers who were impacted by this issue by email which is what you've received. Your data is safe and there have been no further reports of this issue and we are very closely monitoring the service.

Apologies for the confusion caused around the information provided on your call. We've been in touch with our teams internally to clear up any confusion around this and ensure we're communicating accurately.

If you have any questions around this, please let me know.

727019

Hi Rav, I appreciate that the problem has been fixed but as it is a Data Breach has this been reported to OAIC as a Notifiable Data Breach? From what I can see once someone's contact information e.g. home address, has been involved in a Data breach it has to be reported, we also need to report it as per the guidelines - Also do you know how many of our employee's this affects and who they are? I need to advise them of the breach.

Rav

Let me speak with the team to get some detail around the above and I'll come back to you.