What happened
In mid-2018 PageUp, a recruitment and HR software provider used by many large Australian employers — banks, retailers, government and media — disclosed unauthorised access to its systems [pu-acs]. Applicant personal details and reference contacts were exposed, along with hashed PageUp employee credentials; PageUp said tax file numbers and bank details were not affected [pu-acs].
Current status
Disclosed. The OAIC made inquiries and the ACSC was engaged [pu-acs]. No single count of affected individuals was published, so none is asserted here.
Why it matters
A single HR-platform breach reaches the job applicants of every employer that uses it — an early, clear example of supply-chain exposure across the Australian corporate sector.