Iress investigation finds breach affected OneVue

OneVue platforms iress cyber security

15 May 2024
| By Laura Dew |
image
image image
expand image

An investigation of a cyber breach by Iress that occurred last weekend has found it affected its OneVue production environment which contains client data. 

On 13 May, it was announced that an unauthorised access of Iress’ user space on GitHub was detected on 11 May. It initially said no client information was stored on the GitHub platform.

However, following investigation, the firm has discovered a credential within the user space was stolen and used to gain access to the OneVue production environment. 

This is isolated to the OneVue businesses managed funds administration (MFA), platform and superannuation. 

“The OneVue production environment contains client data and we are investigating the extent and nature of the data accessed.

“Investigations have substantially progressed across Iress’ other business lines and at this time we have found no evidence that the remainder of Iress’ production environment, software or client data has otherwise been compromised.”

Iress completed a sale of its OneVue platform business to Praemium only a month ago, which is expected to take 18 months to migrate across to Praemium technology. This was for an initial $1 million in cash consideration and a further payment of up to an additional $20 million over an 18-month period as milestones are met.

In an ASX statement, Praemium confirmed it was unaffected by the incident. 

“The data breach only relates to the OneVue business and no Praemium technology or client data has been impacted. At this time, Praemium has no indication from Iress that OneVue client data has been compromised.

“Praemium receives access to the Iress OneVue Platform Business (IOPB) pursuant to a transitional services agreement with Iress.

“While the investigation is ongoing by Iress, Praemium are in regular contact with Iress and we will continue to keep the market and our clients informed as the investigation continues.”

The OneVue MFA business was sold to SS&C last year. 

Read more about:

AUTHOR

Recommended for you

sub-bgsidebar subscription

Never miss the latest news and developments in wealth management industry

MARKET INSIGHTS

Completely agree Peter. The definition of 'significant change is circumstances relevant to the scope of the advice' is s...

1 month 2 weeks ago

This verdict highlights something deeply wrong and rotten at the heart of the FSCP. We are witnessing a heavy-handed, op...

1 month 2 weeks ago

Interesting. Would be good to know the details of the StrategyOne deal....

1 month 3 weeks ago

SuperRatings has shared the median estimated return for balanced superannuation funds for the calendar year 2024, finding the year achieved “strong and consistent positiv...

5 days 20 hours ago

Insignia Financial has confirmed it is considering a preliminary non-binding proposal received from a US private equity giant to acquire the firm. ...

4 weeks 1 day ago

Six of the seven listed financial advice licensees have reported positive share price growth in 2024, with AMP and Insignia successfully reversing earlier losses. ...

3 weeks 4 days ago

TOP PERFORMING FUNDS