Pareto Phone
| Primary URL | Location | Industry | paretophone[.]com[.]au |
Country
Australia
|
Commercial
|
|---|
Profile
Pareto Phone operates as a charity telemarketing firm based in Australia. Its core service involves conducting outbound phone campaigns on behalf of nonprofit organisations to solicit donations and engage supporters. The firm manages donor contact information, including names, addresses, and communication preferences, as part of its fundraising outreach. By focusing exclusively on the charitable sector, it positions itself as a specialised vendor for telemarketing fundraising.
The organisation's headquarters are located in Australia, indicating a national operational footprint within the country. It has provided services to a range of Australian charities, including health‑focused groups, youth organisations, cancer charities, and international humanitarian agencies. Pareto Phone retains donor data for extended periods, with records spanning up to a decade as noted in the 2023 incident. This long‑term data retention highlights the firm's role in maintaining historical supporter databases for its clients.
A distinguishing attribute of Pareto Phone is its specialisation in handling sensitive personal data on behalf of third‑party nonprofits, which places it under heightened scrutiny regarding data protection practices. The firm became widely known after a March 2023 cyberattack in which the LockBit ransomware group claimed responsibility and exfiltrated donor information such as full names, dates of birth, addresses, and contact details. Notably, the attack did not compromise financial data, but the exposure of personal information prompted criticism of the firm's data retention and security measures. The incident also sparked broader advocacy for improved cybersecurity support for nonprofit organisations that rely on external vendors.
Following the breach, several affected charities—including the Fred Hollows Foundation, Canteen, the Cancer Council, and Médecins Sans Frontières—acknowledged varying degrees of donor data exposure, with some unaware that their historical information remained stored by the telemarketer. The event contributed to calls for enhanced cybersecurity support for charities that engage third‑party vendors. These developments underscore the ongoing challenges faced by service providers like Pareto Phone in safeguarding sensitive supporter information amid rising ransomware threats.