Australian real estate agency Harcourts has revealed it was affected by a cyber attack last month, with the personal information of tenants, landlords, and tradespeople potentially exposed.
In an email sent to customers of the Melbourne City franchisee of Harcourts, the company said it became aware on 24 October that an “unknown third party” had accessed its rental property database.
Harcourts said on Thursday that the breach occurred when the account of a representative at service provider Stafflink, which gives the franchisee administrative support, was allegedly compromised and accessed by that unknown third party.
“We understand the unauthorised access occurred because the representative of Stafflink was using their own device for work purposes rather than a company-issued (and more secure) device,” it said in a statement.