Advances in the Standards & Applied Sciences

Advances in the Standards & Applied Sciences

A Case Study: Data Breaches on Latitude Financial Services

Document Type : Case Report

Authors
Fereshteh- Azadi Parand 1
Sara Tavakoligolpaygani 2
1 Department of Statistics, Mathematics, and Computer Science, Allameh Tabataba'i University, Tehran, Iran
2 Faculty of Science and Engineering, Macquarie University, Sydney, Australia
10.22034/asas.2024.459650.1058
Abstract
One of the most effective methods in the field of cyber-security is the study of attacks and their causes. This paper examines the cyber-attack on Latitude Financial in March 2023, which exposed critical vulnerabilities within Australia's digital infrastructure and compromised the personal data of millions. It investigates the attack's methodology, uncovering insider involvement and misconfigured security settings as key enablers. The study highlights the significance of unpatched software and weak passwords in exacerbating system vulnerabilities, emphasizing the imperative for robust cyber-security measures.
The breach's impact on customers underscores privacy and trust concerns, necessitating stricter regulations and improved security protocols. The analysis of attack methods underscores the evolving cyber threat landscape, urging proactive defence strategies. Moreover, the breach highlights the importance of comprehensive cyber-security measures, including employee training and stringent access controls.
The paper advocates for regulatory reforms to enforce data security standards and ensure accountability among organizations and service providers. It explores the potential of cyber insurance in mitigating post-attack burdens, emphasizing the need for policy enhancements and addressing coverage gaps.
Ultimately, the Latitude Financial breach underscores the urgency for comprehensive reforms in data security practices and regulatory frameworks. By prioritizing consumer data protection, companies and regulatory bodies can mitigate risks and uphold trust in an increasingly digitized world.
Keywords
Data Breaches
Cyberattack
Cyber Insurance
Security
Subjects
[1]. Ainsworth K, Terzon E. Millions expected to be affected by Latitude Financial hack, believed to be far worse than initially expected. ABC News [Internet]. 2023 Mar 27; Available from: https://www.abc.net.au/news/2023-03-27/latitude-far-worse-cyberhacking-almost-8-million-people/102141364
 
[2]. Barrett J. Latitude Financial cyber-attack worse than first thought with 14m customer records stolen. The Guardian [Internet]. 2023 Mar 27; Available from: https://www.theguardian.com/australia-news/2023/mar/27/latitude-financial-cyber-data-breach-hack-14m-customer-records-stolen
[3].  Salahdine, F., & Kaabouch, N. (2019). Social engineering attacks: A survey. Future Internet, 11(4), 89. https://doi.org/10.3390/fi11040089
[4]. Tavakoligolpaygani, S. (2024). Criminal Activity and Environmental Impact as Cryptocurrency Concerns. Advances in the Standards & Applied Sciences, 2(1), 1–3. https://doi.org/10.22034/asas.2023.429605.1048.
[5]. Aslan, O., & Samet, R. (2020). A comprehensive review on malware detection approaches. IEEE Access: Practical Innovations, Open Solutions, 8, 6249–6271. https://doi.org/10.1109/access.2019.2963724
[6]. Wang, Z., Zhu, H., & Sun, L. (2021). Social engineering in cybersecurity: Effect mechanisms, human vulnerabilities and attack methods. IEEE Access: Practical Innovations, Open Solutions, 9, 11895–11910. https://doi.org/10.1109/access.2021.3051633
[7]. Naqvi, B., Perova, K., Farooq, A., Makhdoom, I., Oyedeji, S., & Porras, J. (2023b). Mitigation strategies against the phishing attacks: A systematic literature review. Computers & Security, 132, 103387. https://doi.org/10.1016/j.cose.2023.103387
[8]. Prakash, J., Yu, C. C. Q., Thombre, T. R., Bytes, A., Jubur, M., Saxena, N., Blessing, L., Zhou, J., & Quek, T. Q. S. (2021). Countering concurrent Login attacks in “just tap” push-based authentication: A redesign and usability evaluations. 2021 IEEE European Symposium on Security and Privacy (EuroS&P).
[9]. Chaganti, R., Bhushan, B., & Ravi, V. (2023). A survey on Blockchain solutions in DDoS attacks mitigation: Techniques, open challenges and future directions. Computer Communications, 197, 96–112. https://doi.org/10.1016/j.comcom.2022.10.026
[10]. Botacin, M., Ceschin, F., Sun, R., Oliveira, D., & Grégio, A. (2021). Challenges and pitfalls in malware research. Computers & Security, 106(102287), 102287. https://doi.org/10.1016/j.cose.2021.102287
[11]. de Neira, A. B., Kantarci, B., & Nogueira, M. (2023). Distributed denial of service attack prediction: Challenges, open issues and opportunities. Computer Networks, 222(109553), 109553. https://doi.org/10.1016/j.comnet.2022.109553
[12]. Ur Rahman, R., & Tomar, D. S. (2020). Taxonomy of Login attacks in web applications and their security techniques using behavioral biometrics. In Modern Theories and Practices for Cyber Ethics and Security Compliance (pp. 122–139). IGI Global.
[13]. Lala, S. K., Kumar, A., & Subbulakshmi. (2021). Secure Web development using OWASP Guidelines. 2021 5th International Conference on Intelligent Computing and Control Systems (ICICCS), 323–332.
[14]. Latitude Cyber Incident. (n.d.). Com.au. Retrieved April 5, 2024, from https://www.latitudefinancial.com.au/latitude-cyber-incident
[15]. Razaque, A., Amsaad, F., Jaro Khan, M., Hariri, S., Chen, S., Siting, C., & Ji, X. (2019). Survey: Cybersecurity vulnerabilities, attacks and solutions in the medical domain. IEEE Access: Practical Innovations, Open Solutions, 7, 168774–168797. https://doi.org/10.1109/access.2019.2950849
[16]. Araujo, F., & Taylor, T. (2020). Improving cybersecurity hygiene through JIT patching. Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering.
[17]. Nasereddin, M., ALKhamaiseh, A., Qasaimeh, M., & Al-Qassas, R. (2023). A systematic review of detection and prevention techniques of SQL injection attacks. Information Security Journal A Global Perspective, 32(4), 252–265. https://doi.org/10.1080/19393555.2021.1995537
[18]. Asiri, S., Xiao, Y., Alzahrani, S., Li, S., & Li, T. (2023). A survey of intelligent detection designs of HTML URL phishing attacks. IEEE Access: Practical Innovations, Open Solutions, 11, 6421–6443. https://doi.org/10.1109/access.2023.3237798
[19]. Daubner, L., Macak, M., Matulevičius, R., Buhnova, B., Maksović, S., & Pitner, T. (2023). Addressing insider attacks via forensic-ready risk management. Journal of Information Security and Applications, 73(103433), 103433. https://doi.org/10.1016/j.jisa.2023.103433
[20]. Cybercrime update 11. (n.d.). Com.au. Retrieved April 5, 2024, from https://www.latitudefinancial.com.au/about-us/media-releases/cybercrime-update-11-04-2023.html
 
[21]. Omotunde, H., & Ahmed, M. (2023). A comprehensive review of security measures in database systems: Assessing authentication, access control, and beyond. Mesopotamian Journal of CyberSecurity, 2023, 115–133. https://doi.org/10.58496/mjcsc/2023/016
[22]. Turedi, S., & Erkan-Barlow, A. (2023b). CIO equity compensation and IT investment: the moderating role of board monitoring and evidence of managerial myopia. Review of Behavioral Finance, 15(6), 916–934. https://doi.org/10.1108/rbf-04-2022-0118
[23]. Yasasin, E., Prester, J., Wagner, G., & Schryen, G. (2020). Forecasting IT security vulnerabilities – An empirical analysis. Computers & Security, 88(101610), 101610. https://doi.org/10.1016/j.cose.2019.101610
[24]. Barrett, J. (2023, March 27). Latitude Financial cyber-attack worse than first thought with 14m customer records stolen. The Guardian. https://www.theguardian.com/australia-news/2023/mar/27/latitude-financial-cyber-data-breach-hack-14m-customer-records-stolen
Advances in the Standards & Applied Sciences
Volume 2, Issue 3
Spring 2024
Pages 54-59