An Australian underwriting agency has suffered a “cyber incident”, with reports suggesting stolen data is being offered for sale on the dark web.

All Parks, a niche agency that caters for caravan parks, remains fully operational despite the incident and its systems are secure.

“We can confirm that All Parks has been the victim of a cyber incident,” CEO Julie Pernecker told insuranceNEWS.com.au today.

“We are aware of claims made by a third party that it has taken some data from a standalone All Parks server.”

The agency has engaged a team of cybersecurity experts to “forensically assess and validate those claims, and to undertake an investigation into what has happened”.

Ms Pernecker said: “Those investigations are ongoing, and we are committed to communicating with our stakeholders as material information comes to hand.”

All Parks, based in Wyong, NSW, deals with a limited number of insurance brokers and corporate clients, which could minimise the impact of the attack.

“We primarily collect business data in the course of underwriting and issuing policies to customers,” Ms Pernecker said. “Accordingly, we do not customarily collect sensitive personal information.

“Our investigation is ongoing and if there is any impact to customer data, we will be in touch with those customers directly.”

Envest acquired a majority stake in the agency in 2021, but the cyber issue is confined to All Parks and has had no impact on the broader Envest group.

From Insurance News magazine: Swiss Re's latest emerging risk round-up flags a 'silent' danger for insurers