More than a month after a cyberattack that resulted in hundreds of thousands of dollars being taken from superannuation accounts, AustralianSuper has started to roll out multi-factor authentication (MFA) to customers.
Multiple superannuation funds were impacted by cyberattacks in early April, including AustralianSuper, which has more than 3.5 million users. It drew criticism from members for not having MFA in place, a technology that uses various methods to authenticate users beyond a username and password.
In an email to AustralianSuper members seen by GadgetGuy, the super fund is “now expanding multi-factor authentication to account logins.”
According to the email, AustralianSuper will automatically enable MFA for members with a registered mobile number. Members will receive a one-time PIN to complete the login process.
“Over the coming weeks, we’ll be introducing MFA on the member portal and mobile app,” the email said.
AustralianSuper told Information Age that it “accelerated” setting up MFA in the wake of the cyberattack. It also claimed that multi-factor security was already in place for some actions, like withdrawing money “where the request is initiated within the digital platforms”.
An update shared by AustralianSuper on 11 April stated that “a total of 10 members had a combined $750,000 transferred out of their accounts”, all of which was reimbursed.
In addition to MFA, members are encouraged to further secure accounts by using a strong and unique password, avoid clicking on links in suspicious emails, and keep up to date with the latest scams.
Anyone who believes they may have fallen victim to a scam or cyberattack can file a report with the Australian Cyber Security Centre online or on the phone via 1300 292 371.
The post AustralianSuper finally adds MFA security after April cyberattack appeared first on GadgetGuy.
0 comments:
Post a Comment