A former contract worker at a financial services company will face court today charged over the alleged unauthorised access and downloading of customer identity information.
In December 2018, detectives from the Cybercrime Squad established Strike Force Paunelle to investigate reports customer identity information had been accessed without authorisation.
The company’s cybersecurity staff were alerted to a breach of the system and contacted police after reviewing system activity they deemed to be suspicious.
During the initial internal assessment, the network activity was linked to a contractor – a 28-year-old man – and his access to all systems was blocked and employment suspended.
With the assistance of company staff, Strike Force Paunelle investigators identified the man allegedly downloaded 23 identity-related documents belonging to 20 different customers without authority and sent them to his personal email account.
Following further investigations, strike force detectives, with the assistance of officers from Australian Border Force, arrested the man as he attempted to board a flight to China about 1.15pm on Thursday 17 January 2019.
During a search of the man and his luggage, investigators seized mobile phones, sim cards, a laptop, and numerous electronic storage devices, which is undergoing forensic examination.
The man, who is a Chinese National, was taken to Mascot Police Station and charged with possess identity info to commit indictable offence.
He was granted strict conditional bail to appear at Downing Centre Local Court today (Thursday 7 February 2019).
Cybercrime Squad Commander, Detective Superintendent Matt Craft, said the investigation highlights the importance for businesses to have strong cyber security measures in place.
“Identity information is an extremely valuable commodity on the black market and dark web, and anyone – whether an individual or business – who stores this data needs to ensure it is protected,” Det Supt Craft said.
“In this case, the company’s systems detected a potential issue, and their expert technical staff immediately took steps to identify what occurred and prevent further breaches.
“Their proactivity – including the early engagement with the Cybercrime Squad – and ongoing assistance throughout our investigation were key to a successful resolution.
“This investigation is further demonstration that by combining the tools, expertise, and investigative capability of the NSW Police Force with industry experts and professionals, we can have a real and lasting impact on cybercrime,” Det Supt Craft said.
Investigations under Strike Force Paunelle are continuing.
Anyone with information in relation to technology-enabled and other cybercrimes is urged to contact Crime Stoppers: 1800 333 000 or https://nsw.crimestoppers.com.au. Information is treated in strict confidence.
