<?xml version="1.0" encoding="ISO-8859-1"?> <docID>341814</docID> <postdate>2025-04-04 14:12:20</postdate> <headline>Hackers raid hundreds of superannuation accounts</headline> <body><p><img class="size-full wp-image-277840" src="https://citynews.com.au/wp-content/uploads/2023/02/cyber-security-g77b735a18_1280-e1677444138232.jpg" alt="" width="1126" height="764" /></p> <caption>Hackers targeting superannuation accounts are believed to have sought lump sum withdrawals.</caption> <p><span class="kicker-line">By <strong>Jennifer Dudley-Nicholson</strong></span></p> <p><strong>Hundreds of Australian superannuation accounts have been targeted by hackers in a co-ordinated online attack using stolen passwords.</strong></p> <p>Hostplus, Rest, AustralianSuper and Australian Retirement Trust are among the  providers hit by the attack, which was confirmed on Friday by Australia's National Cyber Security Coordinator Lieut-Gen Michelle McGuinness.</p> <p>AustralianSuper said as many as 600 of its accounts were targeted by the hackers who allegedly sought lump sum withdrawals.</p> <p>While some accounts were not breached, the Association of Superannuation Funds of Australia revealed "a number of members" had funds stolen and would be contacted by providers.</p> <p>The attack took place on the weekend, and follows rising reports of online security threats in Australia with a cyber crime reported every six minutes.</p> <p>Superannuation and banking firms were working with government agencies to respond to the attack, Lt-Gen McGuinness said, which had hit several firms.</p> <p>"I am aware cyber criminals are targeting individual account holders of a number of superannuation funds," she said.</p> <p>"I am co-ordinating engagement across the Australian government, including with the financial system regulators, and with industry stakeholders to provide cyber security advice."</p> <p>The attack followed a spike in "suspicious activity" on AustralianSuper's website and app, chief member officer Rose Kerlin said.</p> <p>"This week we identified that cyber criminals may have used up to 600 members' stolen passwords to log into their accounts in attempts to commit fraud," she said.</p> <p>"While we took immediate action to lock these accounts and let those members know, there are things members can do right now to protect themselves online."</p> <p>Superannuation funds are urging their members to check accounts for signs of fraud, ensure their banking and contact details are correct, and change their password if it is not unique to their account.</p> <p>The superannuation industry association also confirmed members' funds had been stolen in the attack over the weekend.</p> <p>"While the majority of attempts were repelled, unfortunately a number of members were affected," the group said in a statement.</p> <p>"Funds are contacting all affected members to let them know and are helping those whose data has been compromised."</p> <p>It is believed that attackers were targeting accounts that could deliver lump sum withdrawals.</p> <p>Government agencies would investigate the cyber attack, Prime Minister Anthony Albanese said, but he warned that online attacks had become common in Australia.</p> <p>"We will respond in time, we're considering what has occurred," Mr Albanese said.</p> <p>"But bear in mind the context here: there is an attack, a cyber attack in Australia about every six minutes."</p> <p>The Australian Signals Directorate Annual Cyber Threat Report in 2024 revealed cyber crime reports had increased 12 per cent, with an average of 100 calls a day to the Australian Cyber Security Hotline.</p> </body>