Cybercriminals impersonated superannuation executives in a sophisticated fraud that hit several of Australia's largest funds simultaneously. In the same week, hackers compromised member accounts at the country's largest retirement savings managers and siphoned money directly from accounts. The breaches caused widespread panic — websites and apps crashed as members rushed to check their balances.
This was not an isolated incident or the work of unsophisticated actors. It was a coordinated, professional attack on institutions managing a combined $4 trillion in retirement savings. The funds affected — AustralianSuper, Australian Retirement Trust, REST, Hostplus, and Insignia Financial's MLC Expand — are among the most recognised names in the industry.
What the attack revealed
Beyond the immediate financial losses, the attacks exposed several structural vulnerabilities in how large funds manage member security:
- Authentication processes that could be defeated by impersonation
- Withdrawal systems that processed fraudulent requests before detection
- Member communication channels that were inadequate when simultaneous demand spiked
- Incident response processes that left members without information for extended periods
The scale of the industry — hundreds of thousands of member accounts per fund — creates an inherent challenge. Security systems designed for average traffic volumes are tested by coordinated attacks that generate abnormal activity across multiple accounts simultaneously.
Platform quality matters
Not all platforms are equally positioned. NJBFS uses HUB24, which has been independently rated as Australia's leading integrated platform, technology, and data solution for the wealth industry.
HUB24's recognition reflects consistent investment in platform infrastructure:
- Best Overall Platform — 2024 Adviser Ratings Australian Financial Advice Landscape Report
- Best Overall Investment Choice — 2022 Adviser Ratings report
- Number one for tax optimisation tools — 2023 Investment Trends report
- Best Platform Overall and Best in Decision Support Tools — 2024 Investment Trends Platform Competitive Analysis
Platform quality is not only about security. It affects investment choice breadth, reporting accuracy, tax efficiency, and the speed at which transactions are executed and confirmed. For clients with significant retirement assets, these differences compound materially over time.
What members of affected funds should do
If you hold accounts with any of the affected funds, the immediate steps are straightforward: verify your account balance, check your nominated bank account details have not been altered, enable multi-factor authentication if not already active, and review your beneficiary nominations.
More broadly, this episode is a useful prompt to review whether the superannuation structure you hold — fund, investment option, platform, and insurance — is genuinely appropriate for your circumstances. For many Australians, superannuation is their largest financial asset. It warrants the same scrutiny as any other major investment.