Cyber Incident Victim: Isentia
Date:
Oct 2020
Location:
Australia
Summary
A media monitoring firm experienced a major security incident involving suspected ransomware, disrupting its SaaS platform and impacting services for government and private sector clients. The company engaged external cybersecurity specialists to investigate and contain the breach while notifying national authorities, prioritizing service restoration and implementing interim customer support measures. The incident underscored risks associated with third-party vendor dependencies, emphasizing the need for robust cyber-resilience practices across supply chains. Operational disruptions persisted as the organization worked to determine the attack's full scope and system impacts.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 28, 2020, media monitoring firm Isentia disclosed a major security incident disrupting operations of its SaaS Mediaportal platform in a regulatory filing with the Australian Securities Exchange. The Sydney-based company, operating across eight markets, confirmed the disruption affected online services but did not explicitly identify the cause. CEO Ed Harrison stated Isentia had initiated urgent containment measures and launched a full investigation into the incident while prioritizing service restoration. The company implemented temporary processes to support customers during the outage, though specific technical details about the attack vector or initial intrusion method were not disclosed. Isentia engaged leading external cybersecurity specialists to assess the incident's scope and impact on critical systems. The Australian Cyber Security Center (ACSC) was formally notified of the breach, indicating regulatory compliance with national cybersecurity protocols.
The disruption significantly impacted Isentia's client base, which included Australian federal government agencies and private sector organizations. Steve Forbes, a government cybersecurity expert at Nominet, observed that the incident demonstrated risks inherent in third-party vendor relationships despite Isentia not being classified as critical infrastructure. Service interruptions suspended media monitoring operations for affected clients, though no data compromise specifics were confirmed publicly. Isentia's response suggested limited preparedness, as containment efforts remained ongoing at the time of disclosure with no estimated restoration timeline provided. The company committed to revising security practices to prevent recurrence but disclosed no forensic findings regarding attacker tactics or compromised systems. Collaboration with external experts and ACSC continued beyond the initial disclosure date to resolve operational disruptions.