Iress Limited (ASX: $IRE) has been investigating unauthorised access to its user space on GitHub, a third-party code repository platform. Following the initial announcement on Monday 13 May, it has been revealed that a credential within Iress' GitHub user space was stolen and used to gain access to Iress' OneVue production environment, which is isolated to the OneVue businesses - MFA, Platform, and OneVue Super. The company is currently investigating the extent and nature of the data accessed, and has found no evidence of compromise in the remainder of Iress' production environment, software, or client data.
We are deeply concerned about the unauthorised access incident and are working diligently to investigate the matter. The security and privacy of our clients' data are of utmost importance to us, and we are taking all necessary steps to address this issue. We will continue to provide updates to the market as our investigation progresses.
Iress Limited (ASX: $IRE) has reported an unauthorised access incident involving the theft of a credential within its GitHub user space, leading to access to the OneVue production environment. The company is currently assessing the impact on client data and has found no evidence of compromise in the remainder of its production environment, software, or client data. Iress remains committed to keeping the market informed as the investigation continues, prioritizing the security and privacy of client data. The company's swift and thorough response reflects its dedication to addressing the issue and maintaining the integrity of its operations.