If you suspect or confirm a data breach, it’s important to act quickly to minimise harm. Taking immediate action helps reduce the impact on your business and any individuals affected.

Steps to follow:

• Contain the breach by restricting access to affected systems and isolating impacted areas
• Contact your IT support team or service provider to identify the cause and secure your systems
• Assess what data has been affected, including whether personal or sensitive information has been compromised
• Determine your legal obligations under the Notifiable Data Breaches (NDB) scheme
  • This may include notifying the Office of the Australian Information Commissioner (OAIC)
  • You may also need to notify any individuals whose personal information was involved
• Notify your cyber insurer or broker as early as possible
  • You may be able to access forensic IT experts, legal guidance, crisis communication support, and breach response services

Contact us if you need help responding to a breach. We’ll work with you to notify the insurer and ensure you receive the support you need during what can be a difficult time.