We recently issued an alert to Tax Practitioner Stewardship Group members about an emerging fraud event affecting a small number of tax professionals systems. ATO systems were not compromised.
The threat was identified early, and we have since provided support to the small number of agents affected.
While the event is contained, we are still seeing evidence of attempted threats to tax agent systems, not just through links in CVs as initially reported. We are continuing to monitor and respond to the activity and support those impacted. It is critical that all tax professionals stay vigilant and exercise good cyber security practices.
Actions you should take to guard against cyber threats
There are some simple steps you can take to protect your systems and information from cyber criminals, including:
- installing anti-virus software on your system and making sure you keep it up to date – more information on anti-virus software is available on Antivirus softwareExternal Link page on Cyber.gov.au
- being cautious when opening links or attachments, or downloading files from unexpected or unknown sources
- independently verifying suspicious communications using trusted contact details
- using multi-factor authentication (MFA) across your devices and services
- keeping your devices, apps and software up to date – see the How to update your device and softwareExternal Link page on Cyber.gov.au for more information
- regularly backing up important business data and testing your ability to restore it.
And always remember, cyber security is as important when working from home as it when working from the office.
For more practical tips, visit Top cyber security tips for businesses and tax professionals (or search QC50563 on the ATO website).
What to do if you think your systems have been compromised
Turn your device off immediately and seek support either through an IT specialist or the Small Business Cyber Security Centre to identify any malicious programs.
Where you think clients may have been affected, contact the ATO's Client Identity Support Centre on 1800 467 033. Early engagement can help minimise harm, protect client information, and support a timely resolution.
You can also contact IDCARE for free and confidential advice on 1800 595 160 or through IDcare.orgExternal Link
Support and more information
- The Small business cyber security guideExternal Link on the Australian Cyber Security Centre's website provides practical guidance, implementation guides, checklists and resources designed specifically for small businesses.
- Stay informed about current scams through ScamWatchExternal Link and the National Anti-Scam CentreExternal Link, and report cyber security incidentsExternal Link via cyber.gov.au to help law enforcement respond to cybercrime.
- Additionally, the Small Business Cyber Resilience ServiceExternal Link on the business.gov.au website provides eligible small businesses (which includes sole traders and businesses with 19 or fewer employees) with free access to cyber security guidance and support.