Harcourts is the latest company to be rocked by a cyber attack

adsense

PHOTO: Harcourts

A leading Australian real estate agency has suffered a cyber attack, with tenant’s names, addresses, phone numbers and photo identification potentially exposed.

The Melbourne City branch of Harcourts Real Estate sent an internal email to its customers confirming a third party had accessed its rental property database last month.

100 Most Influential Real Estate Agents | COMING SOON

The agency reassured tenants the networks were now all secure and services were continuing as normal.

Harcourts’ Melbourne City and Victoria Corporate Office were both contacted for comment.

It is not known how many people were impacted by the breach.

An email from Harcourts management said the company had suffered a cyber attack in October, potentially exposing the names, addresses and phone numbers of tenants.

The breach is one of many that have rocked Australian companies in recent weeks.

In the email, seen by NCA NewsWire, Harcourts explained they became aware on October 24 that an “unknown third party” had accessed their rental property database without permission.

The company explained the platform was used by their service provider Stafflink to provide them with administrative support.

“The account of one of Stafflink’s employees was compromised and accessed by an unknown third party,” the email read.

Snippets of the email Harcourts sent explaining details of the cyber attack in October, with an explanation of what might have been exposed.

“As a result, your information may have been visible to the third party for a short window of time.

“We are still investigating the incident but understand it has occurred through the employee using their own device for work purposes rather than the usual (and more secure) company-issued device.

The Block’s worst nightmare: Emotional finale trailer hints some homes WON’T sell at auction | WATCH

“As such, we believe this was a one-off incident.”

Harcourts Real Estate said they were confident no other personal information had been affected.

The email explained the full legal names, email addresses, addresses, phone numbers and signatures of tenants was potentially visible.

The bank details of rental providers, landlords and trades may also have been visible.

“We are confident that no other personal information was affected,” the email read.

Harcourts explained they had suspended the compromised account and had added new layers of protection to its outgoing EFP payments, data and security settings.