Protecting your employees' super from cyber threats

In today's digital landscape, cyber attacks and online scams have become a constant and universal threat. A data breach, where unauthorised parties access sensitive information, can have serious consequences. As an employer, it’s crucial to act swiftly if you suspect or confirm a data breach within your systems to protect your employees' super accounts from potential fraud. 

When a data breach occurs, sensitive information about your staff - such as personal identification numbers and account details - can be compromised, putting you and your employees at risk of identity theft and financial fraud.  

At Hostplus, we understand the seriousness of such incidents. By contacting us immediately, you can help us to mitigate these risks. Our expert team will work to prevent the use of stolen information to access your employees' super accounts, ensuring their financial wellbeing remains intact.

We prioritise protecting our members’ personal information by exceeding the superannuation industry standards set by the Australian Prudential Regulation Authority (APRA).

Some of the ways we do this include: 

• multi-factor authentication for all online portals, including the QuickSuper employer portal, Member Online portal and the Hostplus mobile app 
• web application firewalls protecting online portals 
• 24/7 security monitoring and alerts
• ongoing ID theft monitoring using preventative and detective controls on account enquiries and transactions 
• using secure processes for handling or sharing information, including securely disposing information and ensuring third-party providers do the same 
• training and supporting our team to be vigilant and follow security best practices 
• using specialist security testers, and internal and external auditors to regularly test and review our controls. 

1. If you experience a data breach, contact us as soon as possible. We’ll get to work straight away to evaluate the potential impact on our systems and ensure that your employees’ Hostplus account data has not been compromised as a result.  
2. Inform your staff about how they can safeguard their data. This could include: 
   • using unique, long and unpredictable passphrases instead of  passwords 
   • maintaining security of personal devices used to access superannuation and banking portals
   • enabling mobile app notifications
   • reviewing and acting on suspicious login alerts
   • checking their super accounts regularly for any unusual activity. If they do notice anything unusual, they should report it to us immediately.

Our website offers additional tips to help your employees against potential fraud.