Important Update

Update No3: 08 January 2024

On 22 December AJ Baker & Sons became aware that an unauthorised third party had accessed our business and the company’s network systems.

As soon as we became aware of the Incident, we, together with our IT Department, took steps to secure our information and systems, these have since been fully restored.

We notified the Australian Cyber Security Centre (ACSC), the Office of the Australian Information Commissioner (OAIC) and the State and Federal Police Departments.

The business has initiated a higher level of access protocols to our computer systems, and we have implemented two factor authentication (2FA) when accessing our servers from an external location.

We will also engage an independent Cyber Security Company to complete a full forensic audit on our systems and practices to reassure us that customer and staff data is safe. At this stage it is unclear which customers may be impacted, if any. While we do not know what data may be impacted, this notice outlines the steps we recommend all customers should consider taking to protect themselves.

WHAT KINDS OF INFORMATION MAY BEEN IMPACTED?

While our investigation is ongoing, a preliminary assessment has shown that the data impacted by this breach may relate to your records that we hold.

It may include the following kinds of information, if you provided this to us:

• Company details
• Company bank details
• Project documentation

WHAT CAN I DO?

Any data exposed during a cyber incident could be subject to scams or identity fraud. We currently do not have evidence that this was the case but we recommend you consider taking the following precautionary steps:

1. Change your passwords for your online accounts, social media and other online accounts (and otherwise ensure that you have sufficiently complex passwords);
2. Monitor your bank accounts & statements for any suspicious activity;
3. Be alert for any phishing scams that may come to you by phone, post or email. These are emails pretending to be from a reputable company but are not actually sent by that company;
4. Ensure that you have up-to-date anti-virus software and any recommended software patches installed on your computer systems;
5. Visit Scamwatch (at https://www.scamwatch.gov.au/) to keep up with current scam trends; and
6. Read further information about staying safe online at:
   1. the Office of the Australian Information Commissioner’s website at https://www.oaic.gov.au/privacy/your-privacy-rights/data-breaches/data-breach-support-and-resources and their document A guide to managing data breaches in accordance with the Privacy Act 1988 (Cth), July 2019
   2. the Australian Cyber Security Centre’s website at https://www.cyber.gov.au/threats/types-threats/scams

SUPPORT WE ARE OFFERING AND NEXT STEPS

We understand the importance that you place on keeping your information safe and secure. Rest assured that we are working hard to understand what has happened with the support of our cybersecurity advisers.

Keep watching our website for updates and be vigilant for any unusual or suspicious online activity. We will also provide written updates as necessary.

We will continue to keep you informed because we take the security of your information seriously and we are committed to being open and transparent.  We are sorry this has occurred and understand that you may have more questions. If so, you can contact us at email@ajbaker.com.au.

Mike Baker, Managing Director

As soon as more information becomes available, we will provide further updates.

Update No2: 05 January 2024

AJ Baker & Sons is investigating a cyber-incident that impacted our systems over the Christmas break.

We can confirm that an unauthorised third party illegally accessed some of the company’s network systems.

We have secured and restored our systems, notified the Australian Cyber Security Centre and the relevant privacy regulators and law enforcement bodies.

Our investigations are continuing and updates will be provided shortly.

Update No1: 24 December 2023

AJ Baker & Sons are currently experiencing an issue with our email system. Currently, we cannot send or receive emails.

If you require service, spare parts, sales or our general office staff please call us on 1800 423 626.

Our experienced staff can assist you with 24/7 service and maintenance.