Australian life-investment firm Generation Life has confirmed that some customers' personal information was caught up in a cyber attack it first disclosed back in April — an incident that came in through an external service provider and was later claimed by the Qilin ransomware group. We follow the long tail of a breach: how an April intrusion, a May leak-site listing and a late-June confirmation all belong to the same story, why third-party access is the recurring weak point, and what multi-regulator notification looks like for an APRA-regulated business.

Do you know exactly what your service providers can reach? Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: Cyber Daily; Insurance Business Australia; Money Man ...