--- title: Toll Group Hack - A reminder of cyber security impacts description: That Toll is still recovering from an attack that happened 3 weeks ago is a sobering reminder of the impacts that cyber-security attacks have on business. image: https://blog.strategicgroup.net.au/hubfs/-media-214151-0395_thumb_2400%20Road%20truck%20reflection%20hero_0.jpg --- [![Strategic Group](https://blog.strategicgroup.net.au/hs-fs/hubfs/SGRP%20Logo%20-%20Inverted%20white.png?width=2951&name=SGRP%20Logo%20-%20Inverted%20white.png "Strategic Group")](https://www.strategicgroup.net.au) - [Home](https://www.strategicgroup.net.au/) - [About](https://strategicgroup.net.au/about/) - [Careers](https://strategicgroup.net.au/careers/) - [Services](https://strategicgroup.net.au/services/) - [IT Support & HelpDesk](https://strategicgroup.net.au/it-support-helpdesk/) - [Cloud Computing](https://strategicgroup.net.au/cloud-computing/) - [Private Cloud](https://info.strategicgroup.net.au/vault-demo) - [Public Cloud](https://strategicgroup.net.au/public-cloud-computing/) - [Cyber Security](https://strategicgroup.net.au/cyber-security/) - [Security & Risk Audit](https://info.strategicgroup.net.au/cyber-security-audit) - [Staff Training](https://info.strategicgroup.net.au/email-security-training) - [Telecommunications](https://strategicgroup.net.au/unified-communications/) - [Unified Communications](https://strategicgroup.net.au/unified-communications/) - [Microsoft Teams Calling](https://strategicgroup.net.au/ms-teams-calling/) - [Strategy & Planning](https://info.strategicgroup.net.au/virtual-cio) - [IT Consulting](https://info.strategicgroup.net.au/virtual-cio) - [Business Continuity Planning](https://info.strategicgroup.net.au/business-continuity) - [Disaster Recovery Planning](https://strategicgroup.net.au/disaster-recovery/) - [Device as a Service](https://info.strategicgroup.net.au/strategic-group-device-as-a-service) - [IT Projects](https://strategicgroup.net.au/it-project-services/) - [On-site & Hybrid Servers](https://www.strategicgroup.net.au/on-site-servers/) - [Case Studies](https://strategicgroup.net.au/case-studies/) - [Insights](https://blog.strategicgroup.net.au/) - [Blog](https://blog.strategicgroup.net.au/) - [Resources](https://strategicgroup.net.au/resources/) - [Contact](https://strategicgroup.net.au/contact/) - [1300 857 048](tel:1300857048) ![Strategic Group Blog](https://blog.strategicgroup.net.au/hs-fs/hubfs/apple-computer-desk-96858.jpg?width=2000&name=apple-computer-desk-96858.jpg "Strategic Group Blog") # Strategic Group Blog #### Everything you need to know about IT and technology #### [News](https://blog.strategicgroup.net.au/topic/news) [Security](https://blog.strategicgroup.net.au/topic/security) # [Toll Group Hack - A reminder of cyber security impacts](https://blog.strategicgroup.net.au/toll-group-hack-a-reminder-on-cyber-security-impacts) ![close](https://cdn2.hubspot.net/hubfs/2432204/AK-UI%20Builder/close-button.svg) ### Categories - [News (76)](https://blog.strategicgroup.net.au/topic/news) - [Tips (71)](https://blog.strategicgroup.net.au/topic/tips) - [Security (44)](https://blog.strategicgroup.net.au/topic/security) - [Productivity (13)](https://blog.strategicgroup.net.au/topic/productivity) - [Technology (7)](https://blog.strategicgroup.net.au/topic/technology) - [AI (5)](https://blog.strategicgroup.net.au/topic/ai) - [Community (2)](https://blog.strategicgroup.net.au/topic/community) - [Insider (1)](https://blog.strategicgroup.net.au/topic/insider) - [Uncategorised (1)](https://blog.strategicgroup.net.au/topic/uncategorised) ### Subscribe to Email Updates ### Popular Stories [The Essential 8 Guidelines for Business: What You Need to Know](https://blog.strategicgroup.net.au/the-essential-8-guidelines-for-business-what-you-need-to-know) Mar 18, 2025 [Top tech gifts to buy this Christmas](https://blog.strategicgroup.net.au/top-tech-gifts-to-buy-this-christmas-0-1-0) Dec 11, 2024 [Social Engineering Red Flags - What to look out for](https://blog.strategicgroup.net.au/social-engineering-red-flags-what-to-look-out-for) Oct 21, 2022 [Embracing AI in the workplace in 2025](https://blog.strategicgroup.net.au/embracing-ai-in-the-workplace-in-2025) Mar 24, 2025 [How much is IT costing your business?](https://blog.strategicgroup.net.au/how-much-is-it-costing-your-business) Jul 10, 2018 Categories | Subscribe | Populars - - - - Written by Emily Gam on February 11, 2020 Transport company Toll Group are continuing to try to get back to normal operations after a massive cyber-attack on the company’s IT systems. Toll became aware of an issue on the 31st of January and moved to disable the impacted systems to stop the spread of the cyber attack. The incident has been identified as a new variant of a current [ransomware](https://blog.strategicgroup.net.au/the-ransomware-market-has-exploded-2502-in-12-months) attack called ‘mailto’ and is believed to infected as many as 1000 servers, including the company’s Active Directory. > “The ransomware that has affected Toll is a new variant of the Mailto ransomware,” the company said in an [update](https://www.tollgroup.com/toll-it-systems-update) Wednesday. “We have shared samples of the relevant variant with law enforcement, the Australian Cyber Security Centre, and cyber security organisations to ensure the wider community is protected.” Toll are still recovering from this incident with the company reporting yesterday “We are progressing with thorough testing and validation of our IT systems, in collaboration with key customers, with a view to restoring our systems as soon as it is deemed safe and secure for anyone who engages with Toll’s IT network including customers, employees, suppliers and vendors.” At this stage the company does not believe that any customer data has been compromised but has begun a detailed investigation into the incident. "We have shared samples of the relevant variant with law enforcement, the [Australian Cyber Security Centre](https://www.cyber.gov.au/) (ACSC), and cyber security organisations to ensure the wider community is protected," it said. The ACSC has issued a public warning and has recommended organisations "update antivirus and other security tools". > "There is some evidence that Mailto actors may have used phishing and password spray attacks, and then used compromised accounts to send further phishing emails to the user's address book to spread the malware," it said. While we don’t know officially how the ransomware was able to breach the Toll systems, usually ransomware works through [phishing](https://blog.strategicgroup.net.au/how-to-prevent-phishing-in-your-business), sending fake emails to an employee and using [social engineering](https://blog.strategicgroup.net.au/what-is-social-engineering) to trick them into providing details such as passwords. The fact that Toll is still recovering from an attack that happened over 3 weeks ago is a sobering reminder of the impacts that cyber security attacks can have on a business, small or large. **We encourage all of our clients and readers to make sure you are protected from phishing attempts by [regularly testing and training](https://info.strategicgroup.net.au/email-security-training) your staff so they know what to look out for and what not to click.** [![Free User Phishing Test](https://hubspot-no-cache-ap1-prod.s3.amazonaws.com/cta/default/1726473/b18ee902-c230-41ff-bea9-e3c11b89ba74.png)](https://hubspot-cta-redirect-ap1-prod.s3.amazonaws.com/cta/redirect/1726473/b18ee902-c230-41ff-bea9-e3c11b89ba74) ![Subscribe](https://cdn2.hubspot.net/hubfs/2432204/99%20Template%20Pack/Background%20Images/message.svg "Subscribe") ### Subscribe to Email Updates ### Let Us Know What You Thought about this Post. Put your Comment Below. ### You may also like: [News](https://blog.strategicgroup.net.au/topic/news) [Productivity](https://blog.strategicgroup.net.au/topic/productivity) [Technology](https://blog.strategicgroup.net.au/topic/technology) ## [Microsoft ends support for Windows 10](https://blog.strategicgroup.net.au/microsoft-ends-support-for-windows10) In a major shift for businesses worldwide, Microsoft has announced the end of support for Windows 10 devices, set for 14... [News](https://blog.strategicgroup.net.au/topic/news) [Productivity](https://blog.strategicgroup.net.au/topic/productivity) [Technology](https://blog.strategicgroup.net.au/topic/technology) ## [How to use Copilot prompts for buisness](https://blog.strategicgroup.net.au/how-to-use-copilot-prompts-for-business) When leveraging AI tools such as Microsoft Copilot, businesses often face challenges when learning how to enhance produc... [News](https://blog.strategicgroup.net.au/topic/news) [Productivity](https://blog.strategicgroup.net.au/topic/productivity) [Technology](https://blog.strategicgroup.net.au/topic/technology) ## [Top tech gifts to buy this Christmas](https://blog.strategicgroup.net.au/top-tech-gifts-to-buy-this-christmas-0-1-0) The holiday season is the perfect time to surprise loved ones with thoughtful gifts, and for the tech enthusiasts in you... ![](https://cdn2.hubspot.net/hub/2432204/hubfs/99%20Template%20Pack/newsletter_bg.jpeg?width=2000&name=newsletter_bg.jpeg) ## Get all updates straight to your inbox. Stay informed with the latest IT and Technology news. ### Subscribe to Email Updates [![Strategic Group](https://blog.strategicgroup.net.au/hs-fs/hubfs/Logos/SGRP_Final_Logo.jpg?width=700&name=SGRP_Final_Logo.jpg "Strategic Group")](https://www.strategicgroup.net.au) We wanted to be more than just a simple ‘break-fix’ IT provider, and become a true partner that understands our clients’ business drivers and goals so we can provide relevant IT solutions that enable our clients to grow & achieve their goals ##### SERVICES - Cloud Computing - [Helpdesk](https://www.strategicgroup.net.au/help-desk/) - IT Consulting ##### COMPANY - [About](https://strategicgroup.net.au/about/) - [Careers](https://strategicgroup.net.au/careers/) - [Case Studies](https://strategicgroup.net.au/case-studies/) ##### CONTACT Suite 5, 101 Hannell Street WICKHAM  NSW  2293 Phone: [1300 857 048](tel:1300857048) © 2018 All Rights Reserved