Cyber Security

Even with the best information, you can still fall victim to a scam. To help limit the damage, please follow these three simple steps:

1. Don’t panic. Cancel any bank or credit cards that may have been affected, put your accounts on hold and immediately change all passwords.
2. If you think your personal information may have been compromised in any way, please contact Guardian Insurance on 1300 709 431 immediately. As soon as we hear from you, we can take steps to minimize any further losses and help make sure others don’t fall victim to the same scam.
3. If your personal information has been compromised or you’ve suffered financial loss, log an incident with the Australian Cyber Security Centre or call their hotline on 1300 292 371. A list of resources, including recovery and counselling services, can be found on the Scamwatch website.

While a data breach isn’t a scam, it can do just as much damage.

Data breaches occur when a bank, medical facility, educational institution, government department or commercial business has their online security breached, exposing confidential records and databases to the hacker who breached their defences.

If you are informed that your personal information has been compromised by a data breach, take the following 5 steps:

1. Confirm – When hearing about a possible data breach, either being informed directly or seeing it on the news, contact the breached business or organisation directly to make sure you aren’t being targeted by a scam. Tools such as Have I Been Pwned? are a handy way to learn if your phone numbers or email addresses have been involved in a data breach.

2. Scan – Make sure your antivirus software is up-to-date, then scan for malware on your computer and any device that you use to make sure they aren’t infected with a virus.

3. Determine - Once a breach has been confirmed, you need to ascertain what sensitive information has been exposed. Depending on the type of breach, this can be narrowed down by contacting the breached business or organisation for more information or reading any related news stories. For example, if the breach occurred at your bank, you can assume that your account details, identifying information, and more is at risk, and take steps to secure it.

4. Reset – Perhaps the most important step is to change your passwords, even those that may not have been involved in any breach.

5. Observe - After your passwords have been changed and you’ve performed a virus scan on all devices, continue to monitor your accounts for any suspicious activity.

Knowing your personal information has been involved in a data breach can be stressful, but you can minimise any damage by acting quickly and taking the steps listed above. A list of resources, including recovery and counselling services, can be found on the Scamwatch website.

When it comes to your safety online, always practice the following:

• Never share your PIN, security codes or passwords with anyone. That includes writing them down or saving them on your devices.
• Never click on any links in unsolicited emails or text messages. Known as phishing, clicking on these fake links gives scammers access to your device, which allows them to steal your personal information. Be aware that these links often look legitimate but will take you to a fake website.

 For example:

• If your friends or contacts have their accounts hacked, scammers can use their email or profile to send you a malicious link. Always be wary of anything suspicious that comes from a source you trust, and before clicking on any link, always hover the pointer over it to see what website it will take you to. If anything looks suspicious, don’t engage, and reach out to the source directly.
• Never reply to an email or SMS/text message that asks for your personal information, especially if unsolicited.
• Never give anyone access to your computer remotely, especially if their call, email, or text is unsolicited.
• Protect your devices with biometric features such as Two-Factor Authentication (thumbprint or facial recognition), and always make sure your anti-virus software is up to date.
• Use a password generator to create unique, complex passwords for your devices and accounts, and use a password manager to store them securely. Change your passwords regularly, and never use the same password on more than one account or device.
• Avoid connecting your devices to a public Wi-Fi network whenever possible, and however if you do need to connect to a public network, never do any banking or type in your personal details. When using an open network, it’s much easier for scammers to steal your passwords and other sensitive information because there are less protections in place.
• Never connect an unfamiliar USB drive to your computer or device.
• Be wary of phone calls from numbers you don’t recognise.
• Be wary of any business that requests a payment via uncommon payment methods, such as direct fund transfer, money order, pre-loaded card, wire transfer, gift cards, or cryptocurrency.
• Be wary of new friends or romantic partners who develop strong feelings quickly, then ask for money or gifts.
• Be wary of any offer that pressures you into making a decision quickly.
• If you’ve received an offer that appears too good to be true, it probably is — this could include things like high-end fashion or popular electronic devices at bargain-basement prices, or a once-in-a-lifetime return on investment.
• When visiting the Guardian website, type guardianinsurance.com.au instead of clicking on any links contained in emails, SMS or found online. If you’re unsure about any correspondence, please contact us directly – any SMS or email we send you will clearly identify us and include our contact details.