The Australian Sports Commission (ASC) is currently investigating the unauthorised access of an agency email account after a staff member reported unusual activity on their account on 7 November 2019.
The ASC took urgent action to deactivate the email account and isolate the incident. At this stage of the investigation we have determined that only one staff email account has been affected. There is no evidence to suggest that other ASC accounts or systems have been compromised.
The investigation is being supported by the Australian Cyber Security Centre (ACSC) and the Department of Health IT Security team, and I thank them for their support. As required under the Privacy Act, the Office of the Australian Information Commissioner (OAIC) has also been informed of this incident.
As the investigation is ongoing, I will make further statements as appropriate.