Australian superannuation funds hit by cyber attacks, with members' money stolen
A wave of suspected cyber attacks has impacted several Australian superannuation funds, leading to significant losses for some members and raising concerns about the safety of retirement savings across the industry.
According to reports, members of one major fund have collectively lost over $500,000, with many others unable to access their accounts online or through mobile applications — a situation that’s causing mounting stress.
Surge in Attacks on Australian Super
Australian Super, the largest superannuation fund in the country managing investments for over 3.5 million members, is at the center of the recent activity. The fund reportedly faced 600 cyber attack attempts in the past month alone, with four members experiencing confirmed financial losses.
Affected members have expressed frustration over account inaccessibility:
“I assume it’s difficult to log in as everyone anxiously trying to,”
one Australian Super member told ABC News.
“Hopefully Australian Super have taken steps to secure all members accounts until the threat is dealt with.”
“We are extremely concerned — we cannot access our accounts online, and there is no contact by phone,”
another member added.
Some users reported seeing zero balances in their retirement accounts:
“Very disconcerting to have $0 in your super account on a Friday,”
a distressed member said.
If you are a concerned super fund member and need assistance or guidance, you can reach out to us at info@cyberforte.com.au.
Industry Response and Investigation
The Association of Superannuation Funds of Australia (ASFA) confirmed in a public statement that multiple funds were targeted over the weekend:
“While the majority of the attempts were repelled, unfortunately a number of members were affected,”
the statement noted.
“Funds are contacting all affected members to let them know and are helping any whose data has been compromised.”
Additional funds reported to be affected include Rest, Host Plus, Insignia, and Australian Retirement Trust. While it appears that members of these funds did not suffer monetary losses, investigations are ongoing.
“At this stage, we believe that some of our members may have had limited personal information accessed and we are currently working through this with those impacted members,”
said Rest in a statement.
Federal Government Acknowledges Cyber Risk
Prime Minister Anthony Albanese addressed the incident during a recent press conference, acknowledging the seriousness of the situation:
“I have been informed about that,” he stated.
“We will respond in time. We are considering what has occurred. Bear in mind, the context here, there is a cyber attack in Australia roughly every six minutes. This is a regular issue.”
The federal government has increased funding to strengthen cybersecurity resilience across Australia, especially after previous high-profile breaches involving Optus, Medibank, and Latitude, which saw sensitive data leaked on the dark web.
The impacted funds are currently working with the National Cyber Security Coordinator to investigate the incidents and enhance their defenses.
If you believe your information may have been compromised or want expert advice on strengthening your organization’s cybersecurity, reach out to us at info@cyberforte.com.au.
To prevent such incidents in the future, it’s essential for superannuation funds to partner with a trusted cybersecurity company in Australia that specializes in proactive threat detection, incident response, and digital asset protection.
