What happened
In mid-2018 PageUp, a recruitment and HR software provider used by many large Australian employers — banks, retailers, government and media — disclosed unauthorised access to its systems [pu-acs]. Applicant personal details and reference contacts were exposed, along with hashed and salted PageUp employee credentials; PageUp said tax file numbers and bank details were not affected [pu-acs], [pu-td].
Current status
Disclosed. PageUp said it contacted the ACSC, CERT Australia and the OAIC, and the OAIC said it was in contact with PageUp and the ACSC [pu-acs]. No single count of affected individuals was published, so none is asserted here.
Why it matters
A single HR-platform breach reaches the job applicants of every employer that uses it — an early, clear example of supply-chain exposure across the Australian corporate sector.