| I am informing you of a recent data security incident which may have involved information of people who have interacted with this website. What happened On Monday, 17 August 2026, we identified unauthorised access to a database system and immediately took steps to contain the incident. The incident arose from a vulnerability through our third-party service provider. The incident has been contained. We have undertaken analysis to determine what information was accessed and the extent of the incident. What information was involved? If you information has been stored on our website, our investigation indicates that information relating to you was included in the data involved in the incident. This included: Your name Your email and/or other contact details The information involved relates to records from August 2022 to 17 August 2026. As a precaution, we recommend that you: Remain vigilant: Be cautious of unexpected calls, texts or emails, particularly anything asking you to confirm personal information, click a link or make a payment. Don’t click unexpected links or open attachments: This applies even if a message appears to come from Lighthouse Resources or Kyabra, your bank or another organisation you trust. The Australian Competition and Consumer Commission’s Scamwatch initiative has some useful guidance on protecting yourself from scams here:https://www.scamwatch.gov.au/get-help/protect-yourself-from-scams. Check before responding: If you receive a communication claiming to be from Lighthouse Resources or Kyabra and are unsure whether it is genuine, please contact us directly using our official contact details. Contact IDCARE: IDCARE, Australia and New Zealand’s national identity and cyber support service, provides free and confidential advice on 1800 595 160 or through idcare.org. What we have done As soon as we found out about the incident, we immediately contained the unauthorised access and secured the affected systems. Remediation work has been completed. We have undertaken analysis to establish what information was accessed. We have confirmed that the information involved relates to records from August 2022 to 17 August 2026. We have followed processes including notifications to the Office of the Australian Information Commissioner (OAIC) To reduce the risk of this type of incident happening again: We are continuing to assess the incident to identify any further improvements we can make on our systems going forward. We will work with our third-party service provider to ensure that any improvements required on their systems are appropriately remediated. We are very sorry this has happened and for any concern it may cause. Protecting the privacy and security of our customers is extremely important to us. We will contact you if our investigation identifies any further information that is relevant to you or if there are any additional steps you need to take. If you have any questions or would like to discuss this further, please contact us at: [email protected] or on 07 3373 9499. Jean Griffin (Chief Executive Officer) |