<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body><div style="margin: 0px;"><span id="docs-internal-guid-5854d911-7fff-5d23-a10c-90b6b91585fa"><p dir="ltr" style="text-align: left; line-height: 1.38; margin-top: 0pt; margin-bottom: 3pt;"><span style="font-family: Helvetica; background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Dear Colleagues,</span></p><p dir="ltr" style="text-align: left; line-height: 1.38; margin-top: 0pt; margin-bottom: 3pt;"><span style="font-family: Helvetica; background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"><br></span></p><p dir="ltr" style="text-align: left; line-height: 1.38; margin-top: 0pt; margin-bottom: 3pt;"><span style="font-family: Helvetica; background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">On 4 June 2019 the Australian National University (ANU) </span><a href="https://www.anu.edu.au/news/all-news/message-from-the-vice-chancellor" style="font-family: Helvetica; text-decoration: none;"><span style="color: rgb(17, 85, 204); background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration: underline; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap;">disclosed a significant data breach</span></a><span style="font-family: Helvetica; background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> involving its systems[1]. While the full extent of the compromise is subject to ongoing investigation, it seems that a large number of people who have had dealings with ANU over the past 19 years may have had personal information stolen.</span></p><font face="Helvetica"><span style="font-style: normal;"><br></span></font><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">Linux Australia does not store any of its information on ANU systems.</font></span></p><font face="Helvetica"><span style="font-style: normal;"><br></span></font><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">While Linux Australia’s servers are located in an ANU data centre in Canberra, they are not within ANU’s Corporate or Campus networks and have their own address space external to these networks. There is no indication the Linux Australia servers have been compromised either as a part of, or as a result, of the ANU data breach.</font></span></p><font face="Helvetica"><span style="font-style: normal;"><br></span></font><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">Linux Australia has held two linux.conf.au (LCA) conferences at ANU over the past 19 years: in 2005 and 2013. All aspects of the LCA conference itself are managed by Linux Australia on its own systems. This information is therefore not subject to the ANU data breach. However, a number of LCA attendees in 2005 and 2013 chose to stay at ANU student accommodation. This accommodation is managed by ANU. It is therefore possible that some personal details provided to the ANU accommodation services by these attendees may be subject to the ANU data breach.</font></span></p><font face="Helvetica"><span style="font-style: normal;"><br></span></font><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">Initial inquiries have been made by Linux Australia to clarify the extent to which LCA conference attendees might have been exposed to the data breach. Our present understanding is as follows.</font></span></p><ul style="margin-top: 0pt; margin-bottom: 0pt;"><li dir="ltr" style="list-style-type: disc; background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">ANU may have been given the names of conference delegates who stayed at ANU accommodation in 2005 and 2013, although there is no evidence that this occurred. If the information was provided it may have been included in the data breach.</font></span></p></li><li dir="ltr" style="list-style-type: disc; background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">Detailed information about LCA attendees staying at ANU accommodation (including payment methods) was held by the colleges. ANU have advised Linux Australia that the colleges were not included in the data breach.</font></span></p></li><li dir="ltr" style="list-style-type: disc; background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">For attendees who did not stay in ANU accommodation, no information would have been passed to ANU; therefore they would be unaffected by the data breach.</font></span></p></li></ul><font face="Helvetica"><span style="font-style: normal;"><br></span></font><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">For those members who wish to make their own enquiries, the ANU has set up a telephone help line for such purposes (1800 275 268). Alternatively, questions may be sent via email (helpline@anu.edu.au). </font></span></p><font face="Helvetica"><span style="font-style: normal;"><br></span></font><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica">[1] The full text of the Vice Chancellor’s message can be viewed at</font></span></p><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="text-decoration: underline; color: rgb(17, 85, 204); background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><font face="Helvetica" style="text-decoration: none;"><a href="https://www.anu.edu.au/news/all-news/message-from-the-vice-chancellor">https://www.anu.edu.au/news/all-news/message-from-the-vice-chancellor</a></font></span></p><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="text-decoration: underline; color: rgb(17, 85, 204); background-color: transparent; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap; font-style: normal;"><br></span></p><p dir="ltr" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Helvetica; white-space: pre-wrap;">If you have any questions or concerns please do not hesitate to contact Council via <a href="mailto:council@linux.org.au">council@linux.org.au</a> or myself directly.</span></p><div style="font-family: Helvetica, Arial; font-size: 13px;"><br></div><div style="font-family: Helvetica, Arial; font-size: 13px;">Thanks,</div><div style="font-family: Helvetica, Arial; font-size: 13px;"><br></div><div style="font-family: Helvetica, Arial; font-size: 13px;">Sae Ra</div></span></div><div class="gmail_signature"><pre cols="72" style="white-space:pre-wrap">--
Sae Ra Germaine
President
Linux Australia
<a href="mailto:president@linux.org.au" target="_blank">president@linux.org.au</a>
<a href="http://linux.org.au/" target="_blank">http://linux.org.au</a>
Linux Australia Inc
GPO Box 4788
Sydney NSW 2001
Australia
ABN 56 987 117 479</pre></div></body></html>