National Library of Australia and Trove systems affected by user credential harvesting
The Australian Cyber Security Centre (ACSC) has advised the National Library of Australia that a small number of National Library and Trove login credentials were involved in a data breach, where data including usernames and passwords were collected from individuals.
National Library and Trove systems have not been compromised in this breach.
The Library is continuing its investigations, but has found that just over 300 active users – including National Library card holders, those with Trove accounts, 3 Libraries Australia account holders, a single National Library Bookshop user and a single National eDeposit account holder – may be affected.
This may mean that others can use these usernames and passwords to access these accounts, including the personal information provided when users registered.
As a pre-emptive measure, the Library has:
- Deactivated the affected library cards
- Reset the account passwords for all affected Trove accounts
- Deactivated the affected Libraries Australia accounts
- Reset the sole NLA Bookshop account that was affected
- Reset the sole National eDeposit account that was affected
Active National Library and Trove users affected by this incident have been contacted directly via email with further information. The one active affected Libraries Australia account holder has been contacted via telephone call. There will be no correspondence issued by the National Library or Trove via SMS or text messaging services.
We apologise for this inconvenience. Protecting the Library community’s personal information is our highest priority. The ACSC has information on how to protect yourself online at cyber.gov.au
Contact
Georgia McDonald
Assistant Director (A/g), Communications and Marketing, National Library of Australia
Mobile: 0401 226 697
Email: media@nla.gov.au
