00:02Cybersecurity NSW has declared this breach a major incident that stresses no patient data has been affected at this time.
00:10It says an isolated server within NSW Health was hit.
00:14The website in question was this, the Oral Health Fee for Service Scheme.
00:19It gives certain patients vouchers for care from private dentists.
00:23NSW Health says the data taken belonged to those dentists.
00:27So there's no patient data that's involved at all in this circumstance.
00:32It's only a small number of third party provider data.
00:35The NSW Police Cybercrime Squad says this is a serious criminal offence punishable by jail.
00:41It's enlisted the help of US law enforcement, including the Federal Bureau of Investigation.
00:46Police say the breach is not AI related, but rather appears to be an individual offshore.
00:51At this stage we've received no demands, but there has been engagement on a number of different platforms and posts
01:01that have been made by somebody purporting to be the threat actor.
01:03In a post on X, a Dubai based cyber intelligence company says a threat actor called Byte2Breach has claimed responsibility.
01:11The user claims to have snatched 70 gigabytes of data comprising 100,000 sensitive documents.
01:18Just because somebody is posting something online using a handle doesn't make it true.
01:24We need to assess that.
01:25The user claimed to have exploited a misconfigured sub-domain.
01:29A cyber security expert at the University of NSW says if that's true, it was a weak attack that could
01:34have easily been stopped.
01:36Those attacks can be easily preventable, it's just a misconfiguration.
01:41So to protect from such type of breaches or such type of exploits, we don't need advanced protections.
01:49They need to make sure that the passwords have been set properly, for example, authentication has been set properly.
01:55NSW Health reported the breach last Thursday, but the public wasn't informed until today.
02:01The Health Minister has defended the delay.
02:03The last couple of days we were made aware of the issue.
02:06Police made it clear that given it is a live investigation, they wanted to determine when that goes public.
02:14The opposition says the public should have been told sooner and has accused the government of underfunding cyber security.
02:20The NSW Government has found to be utterly lacking when it comes to investment in cyber security infrastructure.
02:27The Auditor General found that less than half of government departments are actually complying with the NSW Cyber Security Policy
02:35when it comes to protecting against risk.
02:38This is the latest in a series of cyber incidents that have hit NSW Government websites in recent months after
02:45crime statistics and data on fires were accessed.
02:48Although in those cases, AI agents were responsible.
02:52The NSWió press carefully.
02:53The NSW's Department of Finance & Translator, It's the first to the US to the Human Services.
02:53The NSW근� engage a lot of people who have their own national network, or their own national network, or whether
02:53they can take a non-COVID-or down-line network,
02:53Whatcha can help us be able to use?
02:54You
