Cyber security update

Update 13 June 2025

Investigation finds no evidence of data breach or stolen funds in April cyber incident

An investigation has confirmed that no member accounts were accessed and no funds were stolen during a cyber-attack in early April.

In the first week of April, Media Super detected an unusual spike in login attempts. This triggered our security controls, and a small number of member accounts were temporarily frozen as a precaution and impacted members were contacted.

The incident occurred several days after reports emerged of cyber criminals targeting other superannuation funds.

Independent forensic analysis into the incident found that attackers made about 27,000 login attempts using a method known as password spraying (using common passwords across many accounts). The independent forensic analysis confirmed that none of these attempts were successful. There is therefore no evidence of unauthorised access to member accounts or any financial loss.

While the cyber-attack was not successful, safeguarding our members remains our highest priority and we continue to strengthen our cyber defences to stay ahead of evolving threats.

Update 28 April 2025

Investigation to date shows no evidence of data breach or stolen money in cyber-attack incident

In the first week of April Media Super experienced an unusually high spike in attempts to log in to member accounts which triggered our security controls. Out of an abundance of caution we locked a small number of member accounts to keep them secure.

Media Super commissioned an independent forensic investigation which found that the spike in log in attempts was likely caused by cyber criminals repeatedly trying to access member accounts.

While our investigation continues, we can reassure members that we have not identified any evidence that funds were stolen in this incident nor that attackers accessed Media Super member accounts or personal information.

Keeping member accounts safe is paramount to Media Super and we are constantly monitoring and strengthening our cyber defences.

We will keep members updated as we continue to thoroughly investigate this incident.