FAQs - Pageup security incident

What happened?

There has been an incident that has involved unauthorised activity on the systems of one of our third party human resources technology providers, PageUp. We are one of many Australian and international organisations who may be affected by this incident. 

We are working with PageUp to confirm the background to the incident and how it relates to you. At this stage, we can confirm that:

  • On 23 May 2018, PageUp detected unusual activity on its IT systems. PageUp has since investigated this activity and has taken steps to contain and prevent any further unauthorised activity on its systems. 
  • On 28 May 2018, PageUp identified that some of the information that it holds may have been subject to unauthorised access or disclosure. 
  • It is not yet clear what information may have been accessed or disclosed however, this is being closely reviewed by PageUp, which has commenced a forensic investigation into the incident. 
  • For more details about the incident, please visit the PageUp website.

 Does this affect me? 

You may be affected by this incident it you applied for a job with Yarra City Council since October 2016, and signed up to a PageUp account as part of that process.

What information was potentially accessed or disclosed?

PageUp has confirmed that the information that may be affected by this incident includes:
• Name and contact details
• User identification and authentication information such as usernames and passwords.

PageUp has advised that employment documents such as employment contracts and resumes are not affected by this incident.

What do I need to do now?

In the meantime, although it is currently unclear what information may have been accessed or disclosed, as a precaution, we have outlined below steps that individuals affected by this incident can take to maximise the ongoing security of their information.

1. Review and continue to monitor your financial and payment card account statements for any discrepancies or unusual activity. Contact your financial institution if you have any concerns.

2. Remain vigilant to telephone call, SMS and email phishing scams, and only respond to legitimate communications from Yarra City Council or PageUp. More information about phishing scams is available on the ACCC's website.

3. Ensure you have up to date anti-virus programs installed on your devices.

4. Review and continue to monitor your consumer credit report for any discrepancies or unusual activity. You can apply for an annual free credit report from each of the consumer Credit Reporting Agencies below. You can also request that a ban be put in place while you investigate further. Relevant contact details are: EquifaxIllionExperian , Tasmanian Collection Service.   

5. You can find additional guidance about protecting your identity by visiting the Office of the Australian Information Commissioner's website.

What is Yarra Council doing?

Although PageUp has confirmed that its website is safe to use, we have temporarily suspended access to the PageUp portal for current job vacancies.

If you have applied for a current role, you can contact our Human Resources team on 9205 5555 who will discuss this with you.
We are also in the process of contacting individuals that may be affected by this incident.

Is there anything else you can tell me?

We want to be open and transparent about this incident and we will continue to update you with more information as it becomes known.
Although this incident does not affect any information held on Yarra Council's systems, and although we are not yet aware whether any candidates have been affected, we wish to apologise to all individuals affected by this incident and any inconvenience that it may cause.

We want to reassure you that we take your privacy and the security of your data very seriously.

If you have any questions about this, you can contact:

• a member of the Yarra City Council team on: info@yarracity.vic.gov.au or 9205 5555. 
• a member of the PageUp team on pageup-security@pageup.com.