I'm curious as to whether the Club members of a Sydney Club will ask some questions of their management and directors. The City of Fairfield RSL Memorial Club Ltd (Fairfield RSL) has indicated that they are "not likely to share [club member and visitor] personal information with overseas recipients" yet it seems that such data has been subject a cyber incident where an offshore party has access to personal information.
The OutABox cyber incident has been a shock to many Australian Clubs and Club patrons. Many personal information records became available. Have I been Outaboxed, was offered to allow patrons to check whether there data had been leaked.
 |
| pexels.com; free and unattributable |
Central to the incident was the access the offshore developers had to Club data. That access is explained here in an extract from Have I been Outaboxed:
Outabox contracted an offshore team of developers from the Philippines to build their software systems. While this outsourcing strategy is common in the industry, what followed was far from standard practice. The developers were granted unrestricted access to the back-end systems of gaming venues, including access to raw data containing facial recognition biometrics, driver's license scans, club membership details, and more. The developers were directed to back up all the data off site, possibly against the knowledge of the operating venue. Shockingly, Outabox provided little to no oversight, allowing these developers free rein over sensitive consumer information.
Fairfield RSL was one of the venus where Outabox systems are installed as identified on this link:
Fairfield RSL Privacy Policy (available on this link) states that the Club is not likely to share personal information with overseas recipients. Where the Club contracts with third parties to provide services it contractually requires the third party to keep your information confidential and secure:
That Privacy Policy was current at the time of the Outabox cyber incident - from September 2021 - as evident from this extract from the Privacy Policy:
No comments:
Post a Comment
Comments are most welcome. It would be most arrogant of me to think that my opinion, or my research, is 100% sound. Your comments shape and build this work.
I have made edits (and whole post deletions) based on feedback of others. I will continue to do so.