Aussie investment firm Generation Life has confirmed that customer data was impacted in a cyber attack it suffered back in April.
In its latest statement (June 24), the company said that an investigation uncovered that the personal information of some of its customers was impacted in the cyber attack.
“Following a detailed investigation and data review, we are now in the process of notifying individuals whose personal information has been confirmed as impacted, in line with our obligations,” the statement reads.
You’re out of free articles for this month
To continue reading the rest of this article, please log in.
“This relates to a limited number of individuals, and we are committed to providing them with the appropriate support and guidance to protect their information.”
The firm confirmed that services remain operating as normal, and that core systems for investment operations remain unaffected, with client investments and funds not impacted. It also said that it found no evidence of any unauthorised transactions.
“Generation Life has notified relevant government authorities and regulators in line with its obligations, including the Australian Prudential Regulation Authority (APRA), the Australian Cyber Security Centre (ACSC), the Office of the Australian Information Commissioner (OAIC), and the National Office of Cyber Security (NOCS),” the statement added.
The cyber attack was claimed by the Qilin ransomware gang back in May, when it listed Generation Life on its dark web leak site.
At the time, it published no details of the incident, nor did it provide a sample. At the time of writing, the listing still contains no data or details, unlike some of the other listings of the same age.
Who is Qilin?
Qilin has claimed 1,948 victims since it was first observed in 2022, spread across 99 countries. It is currently the most active ransomware operation in existence, averaging about 100 victim listings each month in 2026 so far.
The group operates under a ransomware-as-a-service model, with affiliates gaining access to its ransomware infrastructure in return for a cut of any ransom payments.
While some affiliates will publish complete details of their activities, including the volume of data stolen and screenshots of evidence, others post minimal information, often not going into any detail regarding the data and its contents.
Want to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.
Daniel Croft
Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.