We want to let you know that we have recently identified a cybersecurity incident that has affected the Australian Nursing Home Foundation (ANHF). ANHF is a New South Wales based aged care provider of culturally appropriate services to elderly people of Chinese and South East Asian background who are residents in our aged care homes and our community housing, who attend our senior wellness centres and who receive in-home services. We are also supported by our dedicated staff, volunteers and donors.

我們在此告知大家，澳華療養院基金（ANHF）近日發現了一宗網絡安全事故。本機構是一家位於新州的高齡護理服務機構，為居住在這裡的華裔和東南亞長者提供符合文化需求的服務，包括療養院、社區房屋、長者活動中心及家居護理服務。我們的服務由敬業的員工、義工和捐贈者的攜手支援。

What happened?
發生了什麼事？

The incident involved a cybersecurity incident that has impacted some of our systems and the personal information we store on them. We believe this includes personal information about our care recipients, clients, tenants, their families, our staff, volunteers and donors and may also include personal information about other individuals who we deal with such as our suppliers and contractors. Based on the available evidence, it is likely that some information has been stolen from our systems.

這宗網絡安全事故影響了我們部分系統以及存儲在這些系統上的個人信息。我們相信，這包括了我們的護理對象、客戶、租戶及其家屬、我們的員工、義工和及捐贈者的個人資料，也可能涉及其他與我們有業務往來的供應商和承包商。根據現有的狀況顯示，部分資訊可能已從我們的系統中被竊取。

What we are doing
我們正在做的事情

We are treating the matter very seriously. We have engaged our IT and cyber incident specialists to help us investigate and respond to the incident. Our priority at this stage is to understand how it happened, to ensure our systems and information are secure, and to enable us to continue providing important services to our clients. We are also working urgently to establish what information may have been impacted.

我們對此事故極為重視，並已聘請資訊科技與網絡安全專家協助調查和應對。目前的首要任務是查明事故原因，確保系統和資訊的安全，並讓我們能夠繼續為客戶提供相關服務。我們正緊急評估可能受影響的資訊範疇。

We have notified the Australian Cyber Security Centre (ACSC) and the Office of the Australian Information Commissioner (OAIC) and we are also communicating with the Australian Government’s National Office of Cyber Security in relation to the incident. The NSW Police have also been notified and we have communicated with them.
我們已通知澳洲網絡安全中心 (ACSC) 和澳洲資訊專員辦公室 (OAIC)，並與澳洲政府的國家網絡安全辦公室及新州警方保持聯繫，確保事件得到適當處理。

We continue to operate and deliver all of our services with the support of our staff and volunteers and we can continue to accept donations.
在我們員工和義工的支援下，我們的所有服務均正常運行，並可繼續接受捐款。

We will communicate further updates as soon as possible once more information is known about the incident, including details about other support measures we can provide to affected individuals.
一旦掌握更多相關資訊，我們將立即向大家更新事件進展，包括可能為受影響人士提供的其他支援措施。

What you can do to protect yourself now
您現在可以做些什麼來保護自己

Any individuals who may have been affected, including our staff, care recipients, clients, tenants, their families, volunteers and donors, as well as suppliers and contractors who we deal with, should:
任何可能受到影響的人士，包括我們的員工、護理對象、客戶、租戶及其家屬、義工和捐贈者，以及我們的供應商和承包商，應該

• remain vigilant to any suspicious communications they may receive by phone, email or social media, including potential phishing emails and other scam communications, including from organisations purporting to be the ANHF;
  請保持警惕，注意任何可疑的通訊，無論是電話、電子郵件或社交媒體上，包括可能的釣魚郵件或冒充ANHF的詐騙訊息。；
• not respond to anyone you don’t recognise, or provide them your personal information or pay them money;
  切勿回應不認識的聯絡人，或向其提供個人資訊或支付款項
• not click on any links in any communications you are unsure of;
  對於不確定的通訊，切勿點擊任何鏈接；
• always check that a website is legitimate before you provide any details;
  在提供詳細資訊前，務必確認網站的合法性；
• update your passwords and ensure you use secure, strong and up to date passwords or passphrases to protect access to your accounts and personal information; and
  更新密碼，並確保使用安全、強而有效的密碼保護帳戶和個人資訊的安全；以及
• use MultiFactor Authentication (MFA) where available.
  在可行的情況下，使用多重身份驗證（MFA）。

We encourage you to visit the following websites for cyber security guidance and steps you can take to protect your identity and accounts:
我們鼓勵您查看以下網站，獲取網絡安全指引及保護個人資訊的建議：

• Australian Cyber Security Centre (澳洲網路安全中心): Home | Cyber.gov.au
• OAIC for tips on protecting your identity ( 提供有關身份保護的指引) : OAIC Guidance
• Scamwatch: www.scamwatch.gov.au (you can also report scams on this website by clicking on the ‘Report a scam’ button on the home page 您亦可以到主頁上的“報告詐騙”報告詐騙事故).

Support from IDCARE
IDCARE 支援

We are partnering with IDCARE, Australia’s national identity and cyber support community service who have expert Case Managers who can work with you to address any concerns you have about risks to your personal information risks and if you think your information may have been misused.
我們正與 IDCARE 合作，這是一家為全國提供身分安全和網絡支援服務的專業機構。他們的專家顧問可協助您處理個人資訊風險，如您擔心資料遭不當使用，IDCARE 可提供支援。

IDCARE’s services are at no cost to you.
IDCARE 對您提供免費的服務。

If you wish to speak with one of their expert Case Managers, please complete an online Get Help form at www.idcare.org or call 1800 595160. They are available from 9am-5pm AEST Monday to Friday excluding public holidays. They can provide interpreters if you require.
如需與專家顧問聯繫，請在 www.idcare.org 完成「尋求幫助」的線上表格，或致電 1800 595 160 (澳洲東部標準時間 9am – 5pm, 週一至週五，公眾假期除外)。如需翻譯服務，他們可提供協助。請聯絡時提供推薦代碼 ANHF24。

When contacting IDCARE please use the following referral code ANHF24.
聯繫 IDCARE 時，請使用以下推薦代碼 ANHF24.

Our apologies
我們的深表歉意

We sincerely apologise for what has happened and any impact it may cause to anyone that is part of our community. We want to assure you that our team is working hard with our expert providers and relevant government agencies to investigate and resolve the incident.
我們對事故的發生感到遺憾，並對可能受影響的社區人士深表歉意。我們的團隊正在與專家和相關政府機構緊密合作，努力調查並解決此事件。

Further support we are providing
我們提供的進一步支援

If you have any questions or concerns or would like to talk to us about your specific circumstances, please use the following dedicated toll-free incident hotline number we have set up for all incident enquiries: 1800 001 280 ( between 9am – 5pm AEST Monday to Friday excluding public holidays).

如果您有任何問題或疑慮，或希望與我們討論您的具體情況，請致電我們為此次事件設立的免費專線 1800 001 280 (澳洲東部標準時間 9am – 5pm, 週一至週五，公眾假期除外)。

You should also monitor the usual channels we use to communicate with you on, which may include: email, phone, WhatsApp and WeChat.
請持續關注我們日常使用的溝通渠道，包括電子郵件、電話、WhatsApp 和微信。

Thank you for your patience and understanding during this time as we work to respond to the incident.
感謝您在這段時間內的耐心與理解。