Investigating

Generation Life reports possible personal-data leak through external provider

Unauthorised access through an external provider raised the possibility of personal-data exposure, with limited individuals being notified. Possible external acquisition, precise fields and counts are not established in the notices.

Last updated: 2026-11-09

Overview

The May 17 update explicitly identifies April 27 as the first announcement. Online third-party claims are not independent proof of exfiltration; the June 24 notification update was reviewed. Core investment systems, client funds and transaction services remained unaffected, with no evidence of unauthorised transactions.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed
  4. Initial public announcement.

  5. Update on investigation of third-party claims.

  6. Update on notification of affected individuals.

Organization response

The company contained access, engaged specialists, notified affected individuals and APRA, ACSC, OAIC and NOCS, and strengthened transaction monitoring.

What you can do

Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.

Sources

  1. Important update: investigation of online claimsGeneration Life · 2026-11-09
  2. Important update: affected individuals being notifiedGeneration Life · 2026-11-09
  3. Important update: initial announcementGeneration Life · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.