Late last week, the South Australian government disclosed a data compromise following a ransomware attack that targeted an external payroll software provider mid-November. It is suspected that the records compromised correspond to 38,000 South Australian government employees minimum, but it is believed that the number of impacted individuals may be approximately 80,000. This data compromise is due to the targeting of a Frontier Software system and Rob Lucas, the Treasurer of South Australia, released a statement that confirmed that “Frontier on the previous evening had confirmed for the first time that some State Government data had been stolen from their network, and published on the dark web”. Lucas revealed that the data breach does not affect only one department, the Department of Education, and the that following information was compromised: first and last name, date of birth, tax file number, home address, bank account information, employee start date, payroll period, tax withheld, payment type, and more. BleepingComputer confirmed that the Conti ransomware group was behind the original Frontier Software data breach that occurred in mid-November but the relevant posting on the group’s leak site has since been removed. CTAPT analysts will continue to track the Conti ransomware group and all companies affected by their attacks.