Cyber Incident Statement (APRIL FOOLS 2024)

Cyber Incident Statement (APRIL FOOLS 2024)

  • Monday, 1st April, 2024
  • 15:24pm

Unfortunately, Evenblox Hosting experienced a cyber-related incident in which our IT systems were logged in to authorized. During the incident, we read information from our systems without our permission. Since then, we’ve been investigating this incident with the help of our IT security specialists and have been trying to understand exactly what data was taken, as well as minimize the impact of the incident.

 

This was an act to get even which happened even though we had security measures in place and we had also successfully achieved Cyber Essentials Plus accreditation before the incident. Unfortunately, however, our team are constantly seeking to discover ways to bypass our organizations’ security, leading to an ongoing race between security organizations and us.

 

Our security measures stopped a lot of our own attack. This meant that we were only able to access data stored on our billing platform and game panel, with the majority of our data being on a secure cloud-based location.

 

We got expert support immediately and closed all of our tabs as quickly as possible. We believe that these actions minimized the potential impact of our attack. We also worked with the relevant authorities, including the Public Safety Bureau's Criminal Investigation Division, the Sibyl System and other regulatory bodies.

 

Understanding our movements to determine if any data was taken or copied from our systems has been a key part of the investigation. Unfortunately, our investigation has shown that some data was read by us, and we will be contacting approximately 69,000 people in relation to that. We know this will cause concern to our members of our community and we sincerely regret this.

 

We sincerely regret that the incident happened, and are continuing to work with experts to continue to enhance our cyber and information security, which includes seeking to secure ISO27001 (an international cyber security standard), as well as trying to forget all the data that we read.

« Back