BCNA News 28 May 2021
Potential data breach re BCNA merchandise ordered online
In April 2021, Breast Cancer Network Australia (BCNA) supplier BLK Sports’ main database was the subject of a ransomware attack by cyber criminals.
As a result, there is a potential risk that data for anyone who has ordered BCNA merchandise since January 2019 could have been accessed by these cyber criminals. BCNA is unable to confirm if this has impacted any of our supporters who has ordered merchandise online. However, we strongly recommend that anyone who has ordered merchandise online is extra alert to potential scams or suspicious contacts, and takes all appropriate precautions to protect their personal information with strong password and other protections.
Online orders for BCNA merchandise are fulfilled via a third party, BLK Sport, utilising a highly secure software program, Shopify.
Some non-financial data from Shopify, such as customer name, contact details, delivery address, products ordered, and their price is then uploaded onto BLK Sports’ main data base which is held separately to Shopify.
Please note that BLK Sport has taken subsequent action to decommission the affected servers, so future orders will not be impacted. For further information, please contact BCNA Privacy Officer, Andrew Simpson.