Cyber Incident

Important information for former staff of Kyocera Australia

Dear former Kyocera employees,

We are notifying you about a cyber incident that impacted Kyocera Document Solutions Australia Pty Ltd (Kyocera) which may impact you due to your previous employment with the organisation. In the information below, we’ll explain what has happened, the types of personal information that may have been involved in the incident and identify the steps you can take to help ensure your information is protected.

What has happened?

On 26 March 2025, Kyocera Document Solutions Australia Pty Ltd (Kyocera) became aware of suspicious activity on our network. Following this, we promptly launched an investigation to determine the nature and scope of the activity. In the course of these investigations, Kyocera discovered that it had been impacted by a cyber security incident.

Our investigation into the incident is now complete, and we have determined that the unauthorised third-party may have accessed personal information which we hold in relation to current and former staff due to their employment with the organisation. We have informed the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the New Zealand Office of the Privacy Commissioner of this incident.  We have also notified the Australian Tax Office and Kyocera’s main superannuation fund. 

Since the incident, we have undertaken extensive remediation efforts and actions with assistance from our third-party experts to prevent reoccurrence. This has involved securing our networks and progressing work to safely restore our systems and operations.  

What personal information has been impacted?

Our investigation has identified that Kyocera’s Human Resources database, which contains information about former and current staff members, was accessed by the unauthorised third party.  While the information held on our HR database differs for each individual, the HR database includes the following kinds of information:

Full Name, Date of Birth, Residential Address, Contact Details (Phone Number, Email), Date of Employment, Employment Details (i.e. role, title and information related to the performance of your role), Leave Balance, Payslips, PAYG Withholding Payment Summaries, Bank Account Details (BSB and Account Number), Tax File Number, Tax-related Information, Superannuation Details, Medical certificates, names and contact details of emergency contacts and their relationship to you. 

We have been unable to identify exactly what personal information about each individual within the database has been accessed, and we have no evidence to indicate that any personal information was taken from our systems.  There is also no evidence that your personal information held by Kyocera has been published externally.

What do I need to do now?

We know that an incident like this can be concerning and we make the following recommendations to mitigate against the risk of harm:

• If you have any questions about your tax file number or other tax-related information, we suggest you contact the Australian Taxation Office (ATO). The ATO can monitor any unusual or suspicious activity with your tax file number.
• If you have any questions about financial information (such as your bank account details), we suggest you contact your financial institution using the contact details on their website or in the phone book.
• Remain alert to any suspicious emails and SMS or telephone communications that are disguised to look like they come from Kyocera or someone you know. 
• Verify communications by confirming the identity of the sender. This includes checking email names and domains, by hovering your mouse over the sender’s email address. 
• Do not open links that look suspicious. If you are unsure about a link sent to you by a company, you should go to the company’s website and look for the product or service that was offered. 
• Be alert to phishing scams. This could include scams that target you through post, phone or email. Phishing scams are attempts by scammers to trick people into providing their personal information, including passwords, credit card numbers and/or sensitive personal information. Get further information about how to avoid scams at www.scamwatch.gov.au.
• Consider changing your email account passwords, including your online banking account passwords. Make sure you use strong passphrases that you do not use for other accounts. 
• Further information about online safety, cyber security and other helpful tips can be found at the Australian Cyber Security Centre website or the ACCC’s Scamwatch website.

We understand that you may have further questions about this incident. If you do have any questions, please contact the HR team via hr@dau.kyocera.com who will respond to you as soon as possible. 

We sincerely apologise for any concern this incident has caused and want to reassure you that we take your privacy and the security of your data very seriously.

Sincerely,

Motohiro Sato
Managing Director