{"id":21245,"date":"2025-04-08T15:36:59","date_gmt":"2025-04-08T14:36:59","guid":{"rendered":"https:\/\/www.equalexperts.com\/?p=21245"},"modified":"2025-04-10T23:47:50","modified_gmt":"2025-04-10T22:47:50","slug":"australian-superannuation-industry-under-coordinated-cyber-attack-a-call-to-action","status":"publish","type":"post","link":"https:\/\/www.equalexperts.com\/blog\/our-thinking\/australian-superannuation-industry-under-coordinated-cyber-attack-a-call-to-action\/","title":{"rendered":"Australian superannuation industry under coordinated cyber attack: A call to action"},"content":{"rendered":"

A coordinated cyber attack on Australia\u2019s superannuation industry last week resulted in the theft of $500,000 from member accounts and the compromise of sensitive member data.<\/p>\n

While the majority of attack attempts were stopped, the cyber defences of major superannuation funds<\/a>, including Rest, HostPlus, AustralianSuper, Insignia Financial, and Australian Retirement Trust, were significantly tested during the attack.<\/p>\n

AustralianSuper, which has more than 3.4 million members, confirmed that four of its members<\/a> had a collective $500,000 taken from their accounts while 600 member passwords were also compromised.\u00a0 Rest said 8000 accounts may have had personal information accessed, but no funds were transferred, while Insignia Financial said about 100 accounts had been targeted, but no financial impact to customers had been detected.<\/p>\n

As funds rush to reassure members and work with government agencies, this attack also highlights the vulnerability of digital systems in the sector and the pressing need for enhanced security measures.<\/p>\n

Challenges and opportunities: A vital industry under pressure<\/h2>\n

The Australian superannuation industry manages nearly $4 trillion AUD in retirement assets, with these funds often held securely under global asset custodianship by institutions like JP Morgan, Citigroup, State Street, and BNP Paribas.<\/p>\n

Despite this secure custodianship, the industry is under immense pressure, with the landscape increasingly being shaped by technology.<\/a> There is an unprecedented focus on enhancing members’ retirement outcomes through digital transformation –\u00a0 including simplifying services, offering digital advice and providing data-driven personalised experiences. Millennials and Gen-Z in particular are demanding high-quality, seamless digital and online experiences from super funds and are willing to switch funds if their expectations are not met.<\/p>\n

With the vast amount of money managed by funds and an increased reliance on digital platforms, super funds are a significant target for cyber threats.<\/p>\n

Protecting superannuation assets from cyber threats now and in the future<\/h2>\n

To safeguard the integrity of the superannuation system and protect its assets from such threats, super funds need to consider the following strategies:<\/p>\n

    \n
  1. Multi-Factor Authentication (MFA): Implement MFA across all platforms to add extra layers of security beyond just passwords. This can involve requiring uniquely generated codes or biometric authentication.<\/li>\n
  2. Regular security audits: Conduct regular audits to identify and address vulnerabilities in systems. This proactive approach can prevent potential breaches.<\/li>\n
  3. Member education: Provide clear guidance to members on how to protect themselves online. This includes using unique passwords, keeping software up-to-date, and being cautious with links and attachments.<\/li>\n
  4. Industry collaboration: Encourage collaboration among superannuation funds, government agencies, and cybersecurity experts to share knowledge and best practices. This collective effort can strengthen defences against coordinated cyber-attacks.<\/li>\n
  5. Strengthen cybersecurity frameworks: Support initiatives like the ASFA Financial Crime Protection Initiative (FCPI) <\/a>to develop sector-wide cybersecurity frameworks and tools for managing threats effectively.<\/li>\n<\/ol>\n

    A Zero-Trust and layered security approach across Architectural Building Blocks<\/h2>\n

    Super funds rely on a variety of systems and capabilities which work to deliver members with engaging and integrated services. When combined together, these Architecture Building Blocks (ABBs)<\/a> ensure alignment between business objectives and technological capabilities. But they also have a vital role to play in maintaining security across a super fund.<\/p>\n

    1. Network security:<\/strong><\/p>\n