Privacy Notice

Centrepoint Alliance provides notice of a data breach which impacted the personal information of some clients of its subsidiaries - Professional Investment Services Pty Limited and Alliance Wealth Pty Limited. This notice also relates to the personal information of clients belonging to financial services licensees who utilise the services of Associated Advisory Practices Pty Limited.

What happened?

On 20 April 2018 Centrepoint Alliance determined some client information was sent to an unknown third party email address. Independent, forensic cyber experts have confirmed it was a highly sophisticated email phishing attack.

The breach was immediately contained and we have since confirmed Microsoft Outlook was the only system impacted. An investigation was commenced and all relevant authorities were informed.

What have we done?

Once aware of the breach, Centrepoint Alliance took immediate steps to determine the scope of the issue and implemented protocols to prevent further access. We reported the matter to the Office of the Australian Information Commissioner (OAIC) and to the Australian Securities and Investments Commission (ASIC). In addition we have reported the matter to the police via the Australian Cybercrime Online Reporting Network (ACORN).

As a further precaution, we took the following measures:

  • took all reasonable steps to notify impacted persons and provide information on how they can protect their data. In some cases we were unable to identify addresses for impacted persons.
  • we continue to monitor the internet for the next three months to ensure the affected data is not used.
  • we notified all financial advisers with impacted persons.
  • we implemented additional security measures including monitoring of funds going in and out of accounts.
  • we notified ACORN and CERT Australia (an agency of the Commonwealth Attorney General’s office).
  • we notified Google to report the unauthorised account used to access our email account.

We take the confidentiality of our clients’ information and their privacy seriously and we have a variety of protective systems, software and protocols in place to prevent cyber breaches. That said, we will continue to review and improve security protocols to provide an even greater level of cyber protection.

We have engaged an independent, forensic data company to work with us to make further enhancements to our systems in order to detect and prevent future unauthorised access to user information.

What can you do?

In the first instance, if you are aware of any suspicious activity linked to the data breach, please refer to this Top Tips flyer for information on how to protect your privacy online. Further information can also be found on the following websites:

Centrepoint Alliance has a privacy and complaints phone number to assist with any queries - 1800 653 244 or email privacy@cpal.com.au

Alternatively, you may contact the Office of the Australian Information Commissioner (OAIC) on 1300 363 992 or by email enquiries@oaic.gov.au. For further information, please visit www.oaic.gov.au