Jun 1, 2018

  • I.T, Data
Citywide is among a number of Australian organisations that may have been impacted by a data security incident at human resources technology provider PageUp.

Citywide uses PageUp to manage job applications and candidate information. We are in the process of obtaining information from PageUp about the nature and extent of a recent security incident and possible data breach. We have asked for urgent responses from PageUp.

Citywide is not currently aware of any fraudulent activity relating to anyone’s data as it relates to our Careers page occurring as a result of the security breach.

However, we recommend that anyone who has applied online for a position with Citywide in the past 18 months check their PageUp profile to ensure there has been no recent unusual activity concerning their personal information and to maintain a close watch on the use of their personal information.

Citywide takes data security and privacy matters very seriously and we will keep you updated as we receive further information from PageUp.

If you have further queries on this matter, you can access the PageUp website by clicking here.

O you can contact Citywide at citywide@citywide.com.au or phone 1300 136 234 with any other questions you may have.

FAQs

Who is PageUp?

PageUp is an Australian company who provide HR software systems and one of the largest recruitment system providers in Australia. Citywide uses PageUp to support our recruitment activities.

What is the issue?

PageUp have communicated that ‘On May 23, 2018, PageUp detected unusual activity on its IT infrastructure and immediately launched a forensic investigation. On May 28, 2018 our investigations revealed that we have some indicators that client data may have been compromised, a forensic investigation with assistance from an independent 3rd party is currently ongoing.’

Citywide was notified of the incident by PageUp on 31 May, and has been urgently seeking information about our data from PageUp since that time.

Have the authorities been notified?

PageUp have detailed who they have notified on their website  

https://www.pageuppeople.com/


Data Security

If I’m concerned about my data security, what should I be looking out for?

This is a good site to find out more about what you should be looking out for if you are concerned about your data privacy

https://www.scamwatch.gov.au/types-of-scams/attempts-to-gain-your-personal-information/identity-theft

How do I know my PageUp profile is secure?

At this stage, we cannot confirm that PageUp profiles are secure, and therefore encourage individuals to re-set passwords, not update any further personal information and if you are concerned consider deleting your profile.

How can I delete my PageUp profile?

Candidates are unable to delete their own PageUp profile, if you would like your PageUp profile deleted, please contact us at citywide@citywide.com.au


Recruitment Process & my application

If I have an application in progress what will happen?

PageUp’s CEO has stated that “There is no evidence that there is still an active threat, and the jobs website can continue to be used.  All client user and candidate passwords in our database are hashed using bcrypt and salted, however, out of an abundance of caution, we suggest users change their password”.  Citywide is therefore continuing to utilise PageUp and suggests that if you are an existing user, change your password.

When will you know more?

We are dependent upon PageUp providing information regarding the security issue and their investigations. Refer to PageUp’s website for further updates 

https://www.pageuppeople.com/