Our team discovered a cybersecurity incident which has affected Council’s systems.
Specialist Cybersecurity experts are onsite after ICT turned off systems as a precaution over the weekend.
Q: How did this cybersecurity incident happen?
A: Safeguarding customer and employee information is highly important to us. As soon as we became aware of the ransomware, we took action and shut down our systems to begin an immediate investigation.
We are unsure at this time of the source of the attack however malware can originate from a range of sources including:
Emails with links and attachments. Non-corporate devices touching the network Long-term targeted attacks Security vulnerabilities etc.Q: What is the process until the issue is resolved?
A: We are providing updates as the situation evolves via our Facebook page. Council is working with the Dell Incident Response and Recovery Services and the Australian CyberSecurity Centre to determine the source and impacts of the attack.
Q: Has my personal information been accessed?
A: We are taking this matter very seriously as cybersecurity is part of our day-to-day business.
At this stage we do not have any evidence to suggest that data has been downloaded from our system, however this is still being fully investigated.
Council will provide updates via its Facebook page or on the website at https://www.isaac.qld.gov.au/cybersecurity-incident
Q: Do I need to change my personal passwords, accounts, etc?
A: This cyber security incident has shown us that anyone can be subject to malicious attacks.
We cannot stress enough how vigilant businesses and individuals need to be.
For best practice advice visit: https://www.cyber.gov.au/acsc/view-all-content/guidance/personal-cyber-security-first-steps-guide
Q. When will you we know how this impacts me?
A: It is unknown at this time when the investigation will be completed.
In the meantime, Council will provide updates via its Facebook page or on the website at https://www.isaac.qld.gov.au/cybersecurity-incident
Q: What Council services have been affected?
A: Internal systems are all affected resulting in reduced customer service capabilities.
Q: Can I still make payments with Council?
A: We can still process payments via EFTPOS and complete manual receipts.
Q: What is being done to resolve the situation?
A: Council is working with the Dell Incident Response and Recovery Services and the Australian CyberSecurity Centre.
Q: When do you expect it to be resolved?
A: It is unknown at this time when the investigation will be completed.
In the meantime, Council will provide updates via its Facebook page or on the website at https://www.isaac.qld.gov.au/cybersecurity-incident
Q: How can I contact Council?
A: You can drop into our offices and libraries in person during business hours if you have an inquiry. Our staff will do their best to assist you. If residents can please contact us with emergent issues only through our number (07) 2104 5417 while we work through this serious matter.
Q: When will we find out more?
A: Council will provide updates via its Facebook page or on the website at https://www.isaac.qld.gov.au/cybersecurity-incident as we are taking this matter extremely seriously.