We are writing to let you know that Hey You Pty Ltd (Hey You) recently became aware of a cybersecurity incident during which an unauthorised third party was able to unlawfully access a Hey You database that contained some customer data.
We took immediate steps in response to the Incident to engage independent cybersecurity experts to conduct a forensic investigation.
The following types of information about you was included in the impacted database and was capable of being accessed:
Contact information (including name, email, address and phone number)
Hey You login details (including your Hey You password).We hold this information on our systems as you are a current or former customer of Hey You.
Hey You does not store customer payment information such as credit card details in our systems, meaning that no payment information was capable of being accessed.
What can you do?
As a precautionary measure, Hey You has reset your account password. This means your current password has expired and you will need to set a new password the next time you use the Hey You app. You may also want to change your password where the same password and login email address is used on other platforms/accounts out of an abundance of caution.
We also recommend that you consider taking the follow steps to protect yourself from potential scams:
Check your Hey You app for suspicious activity.
Be alert to any suspicious emails, SMS or telephone communications that are disguised to look like they come from someone you know or trust. Verify the legitimacy of communications by authenticating the sender. This includes checking email names and domains.
Do not open links that look suspicious. If you are unsure about a link sent to you by a company, you should go to the company’s website and look for the product or service that was offered.
Be alert to phishing scams. This could include scams that target you through post or email. Phishing scams are attempts by scammers to trick people into providing their personal information passwords, credit card numbers and/or sensitive personal information.
You can find further information about online safety, cyber security and helpful tips to protect yourself at the Australian Cyber Security Centre or the ACCC’s Scam watch website.
Queries
We sincerely apologise for any inconvenience caused as a result of the Incident. If you have any queries, please feel free to contact us at [email protected].Regards,
Asheesh Chacko, CEO
Hey You Pty Ltd
While there has been no shortage of data breaches, I'm surprised Hey You were storing passwords in plain text. It seems not everyone received the email so wondering if it was only people who signed up when they were known as BeatTheQ. Anyone else get this email today?
Ergh. C'mon people. Delete customer's data when you don't need it anymore… and encrypting passwords is surely security 101