"MFA wasn't enough - and their ACC contract was on the line."
A Christchurch counselling practice had MFA in place when a phishing attack bypassed it entirely, triggering a mandatory Privacy Commissioner notification and putting their ACC contract at risk. ITstuffed was called in during the live incident.
Read the case study“They had MFA. They had good intentions. They still got breached.”