What happened
In November 2021 Frontier Software, the external payroll provider used by the South Australian Government, was hit by ransomware. A listing on the Conti group’s leak site matched the attack, as reported by BleepingComputer; that listing was later removed [frontier-bleeping]. Frontier confirmed “some data exfiltration”; publication of the data has not been confirmed [frontier-bleeping]. The SA Treasurer said the records of at least 38,000 employees were confirmed accessed, and that up to 80,000 could be affected [frontier-acs], [frontier-indaily]. Exposed data included names, dates of birth, home addresses, tax file numbers, bank account details, remuneration, tax withheld and superannuation information [frontier-bleeping].
Timeline
- 2021-11-13 — Frontier Software’s systems were hit by ransomware; a Conti leak-site listing later matched the attack, as reported by media [frontier-bleeping].
- 2021-12-10 — The SA Government publicly disclosed the breach and began notifying affected employees [frontier-bleeping], [frontier-acs], [frontier-indaily].
Current status
Disclosed. The “people affected” figure is the confirmed minimum of 38,000; the government said up to 80,000 could be affected. Figures are as reported by the government and credible media. No regulator action has been sourced.
Why it matters
A third-party payroll provider became the single point of failure for an entire state government’s workforce — and the exposed fields (tax file numbers, bank accounts) are among the most sensitive for identity-theft and fraud risk.