Generation Life Reports Contained Unauthorized Access via Third-Party Provider

Summary

Generation Life says unauthorized access through a third-party service provider affected a limited part of its network, was quickly detected and contained, with no evidence so far of core-system impact or unauthorized transactions. Investigation continues.

Key points

• Generation Life reported unauthorized access to a limited part of its network through a third-party service provider; the company says it detected and contained the incident quickly.
• The company said there was no evidence of impact to its core systems or unauthorized transactions at the time of its statement.
• Generation Life engaged cybersecurity experts to investigate the activity and determine what may have been affected.
• The company said affected advisers or clients would be notified after the investigation, if any are identified.
• Generation Life notified APRA, OAIC, ACSC, and NOCS.
• The company said the incident had not affected Evidentia Group or Lonsec Research & Ratings systems.