Metricon Homes has been hit by a cyber attack, with 128 gigabytes of data stolen from the popular builder including finance information and details of staff salaries.
The stolen data includes more than 98,000 files, including details of company credits and employees who hold them, credit card receipts, finance and HR information, profit and loss statements, and details of staff salaries including commission rates.
The hackers have said the data will be fully published within seven days.
Metricon Homes’ website recently had a notification that it was experiencing an IT issue, but it has now confirmed it is “responding to a cyber incident that temporarily impacted access to its internal systems and networks”.
“This issue was swiftly contained with the support of external experts. Metricon can confirm that there has been no impact to the safety of our operations, and construction activity has continued without interruption,” a Metricon Homes spokesperson told REB’s sister title, Cyber Daily.
“Metricon are now aware that an unknown third party has named the company online and disclosed a small amount of data they claim was taken from our IT environment without authorisation. We are currently investigating these claims as a priority.”
The company is continuing to investigate the incident and the scope of the data compromised and has committed to notifying impacted individuals directly. Metricon’s internal systems are back in operation, and payments to suppliers and tradespeople are continuing as normal.
“We have notified the Australian Cyber Security Centre (ACSC), the Office of the Australian Information Commissioner (OAIC), and law enforcement authorities. We have also updated our staff, suppliers, and trades throughout this process. Our response efforts remain focused on system security, transparency, and supporting those impacted by this incident,” the spokesperson said.
Metricon CEO Brad Duggan added his own statement to the company’s response.
“We take this incident extremely seriously and are working with independent experts to understand exactly what occurred,” Duggan said.
“Our customers, team, and partners expect us to protect their data, and we are committed to managing this incident with care, speed, and openness.”
You are not authorised to post comments.
Comments will undergo moderation before they get published.