Update on FRV cyber-attack 6 January 2023

Friday, 6 January 2023 at 5:41 am

FRV has today notified the Office of the Australian Information Commissioner of an eligible data breach following its recent cyber-attack.

While investigations are ongoing, there is currently no evidence that FRV information has been posted on the dark web. However, we have reasonable grounds to believe that information may have been accessed or stolen by a malicious third party.

It is a complex task to identify what information is involved in this attack and FRV has engaged specialists to assist with this analysis.

While this analysis progresses, we are assuming the information that may have been accessed or stolen includes personal information about:

  • current and former employees of FRV and the former Metropolitan Fire and Emergency Services Board (MFB), individual contractors and secondees from other organisations to FRV and the former MFB
  • job applicants for FRV roles or former MFB roles (excluding firefighter recruit applicants, who are not impacted).

We encourage these groups to take practical steps to protect their information and we are making identity protection and credit monitoring services available to them.

FRV is offering free support from IDCARE, Australia’s national identity protection and cyber security support service, and Equifax to enable individuals to set up individual credit and identity protection monitoring.

We encourage those who may be affected to remain vigilant with all online communications, validate any information they receive and follow other cyber security tips such as changing their passwords regularly.

FRV will attempt to contact those individuals who have records on file to alert them to these tips and the support available. Individuals are encouraged to visit the FRV website for further information.

Throughout this incident, community safety has not been compromised and FRV continues to turn out crews and fire trucks through mobile phones, pagers, and radios. The community should continue to call Triple Zero (000) in an emergency.

FRV continues to work around the clock to recover our systems and we thank our employees and partners for their ongoing understanding and support. A number of systems, including access to phones and emails, have now been restored.

We also acknowledge the significant support of the United Firefighters Union in assisting FRV to respond to the situation.