Experts warn stolen chamber data could fuel further attacks

Experts have warned that stolen data from the cyberattack on the Upper Austria Chamber of Labour could be used for further fraud, ORF reported. The attack may affect the organisation’s one million members.

Phone numbers, email addresses and postal addresses were among the member data affected. IT expert and court-appointed expert Georg Beham said social security numbers were particularly valuable to hackers because they could provide important health information. Combined with a phone number and email address, the data could become highly sensitive, he said.

The stolen information could be used for social engineering, or social manipulation, including convincing fake emails. An attacker could claim that a bank or social insurance provider was offering a refund and then request the recipient’s bank account number, Beham said.

Cyberattacks are also increasingly being carried out with the help of artificial intelligence, IT experts have observed for about a year. Companies are responding by strengthening their defences and taking the threat seriously, Beham said.

A new law, the NISG 2026, will enter into force on October 1 and introduce additional cybersecurity obligations. This is expected to prompt businesses to invest in security measures.

Experience from similar attacks shows that it can take weeks or even months for companies to return to normal operations, the IT security expert said.