NSW pub and RSL patrons impacted by major data breach
NSW pub and RSL patrons could be impacted by a major data breach. Hospitality group Merivale has also been named.
Around a million patrons have already had their driver’s licenses shared online, the unwitting victims of a pay battle between Australian-based tech company OutABox and its Philippine-based offshore developers.
OutABox supplies gaming and hospitality products to NSW. Its Philippine developers claim they have not been paid for work they completed over a year ago.
The developers set up a website called haveibeenoutaboxed.com, which has published the driver’s licence details of more than one million people who visited pubs and clubs across Australia, Asia and the US.
Other details include signatures, club membership data, home address, birthday, phone number, club visit timestamps and slot machine usage.
Most identifying information at this time has been redacted. People can search for their name on the website to determine if their data has been compromised.
“While limited information is currently known, we understand that some personal information of patrons of the clubs that use this IT provider may have been compromised,” a ClubsNSW spokesperson said.
“In the interim, club patrons are advised to take extra caution when reviewing emails or texts and to avoid clicking on any suspicious or unfamiliar links,” the spokesperson said.
“The clubs concerned are working towards notifying all impacted patrons.
“ClubsNSW have met with all impacted clubs and are providing whatever support we can, noting again that the incident relates to a third-party provider.”
OutABox has been touch with authorities.
The following venues have been named on the website:
- Breakers Country Club in Wamberal
- Bulahdelah Bowling Club
- Central Coast Leagues Club in Gosford
- Mex. Club in Mayfield
- City of Sydney RSL
- East Cessnock Bowling Club
- Fairfield RSL
- Gwandalan Bowling Club
- Halekulani Bowling Club in Budgewoi
- Ingleburn RSL Club
- Club Old Bar
- Club Terrigal
- West Tradies in Dharruk
- The Diggers Club
- Hornsby RSL Club
- Merivale
- The Tradies Dickson
- Erindale Vikings
OutABox released a statement addressing the issue: “Outabox has become aware of a potential breach of data by an unauthorised third party from a sign-in system used by our clients.
“We are working as a priority to determine the facts around this incident, have notified the relevant authorities and are investigating in co-operation with law enforcement.”
An active police investigation is now underway.
“We understand this news may cause concern to our staff, clients and their customers, and we thank them for their support and patience as we work to resolve this as swiftly as possible,” the OutABox statement said.
According to 2GB radio host Ben Fordham some politicians are reportedly caught up in the breach.
“Politicians have started to put their names in the website,” Fordham said on Wednesday.
“It’s got details crossed out but enough to know ‘they’ve got my details.”
Jonathan Jackson, 2nd May 2024
