| 08.08,19. 06:25 PM |
TAFE NSW staff details stolen after computer systems allegedly hacked
Around 30 employees have not been paid on time after having personal information stolen in what TAFE NSW said was a "targeted phishing attack". (AAP)
Computer hackers have allegedly breached TAFE NSW's payroll system and stolen bank details of at least two dozen staff, TAFE and a victim of the hack said.
Around 30 employees have not been paid on time after having personal information stolen in what TAFE NSW
A TAFE NSW spokesman said the organisation was working with the NSW Police Cyber Crime Unite to identify the source of the data breach and "to ensure it does not happen again".
Payroll staff were urgently processing payments manually for affected workers, he said.
One employee, who spoke on the condition of anonymity, said she only learned of the hack when she received a phone call from TAFE's payroll department.
"They asked me if I had changed my bank account details," the woman told nine.com.au. "My account had been compromised, my bank account details had been changed.
"She (payroll) said it was being investigated, that my pay would be late."
The TAFE worker said she was told payroll started called employees after noticing that "too many" people in the system had suddenly changed their bank details.
"She had a list of around 28 people that she was calling," the woman said. "My understanding is that IT has been going through the system and trying to lock down the accounts."
The spokesman said TAFE NSW became aware of the issue yesterday.
"These credentials were used to access employee self service functions within the payroll system and alter bank details," he told nine.com.au.
"The attempt was discovered quickly and measures immediately put in place to stop fraudulent payments.
"TAFE NSW is working with Cyber Security NSW and the NSW Police Cyber Crime unit to identify the source of the breach and to ensure it doesn't happen again.
"A full briefing for the NSW Privacy Commissioner is being prepared. TAFE NSW will continue to work with the appropriate authorities as necessary."
The NSW Police Cyber Crime unit has been contacted for comment.