On 15 February 2024, Vili's, an iconic South Australian bakery, experienced a serious cyber attack. Although the business had started planning a system upgrade, the attack struck before changes could be put in place.
The impact was immediate and severe. The business lost 56 years of data, including invoices, creditors and debtors lists and other critical records. Staff suddenly had to return to paper-based processes using carbon copy invoice books to keep operations moving. For three months, Vili's could not issue invoices, creating enormous challenges for the business.
The recovery took more than 18 months, involving a complete rebuild of systems, processes and policies. While the experience was confronting, it highlighted important lessons: how quickly an attack can happen, the role of staff awareness and the need to think carefully about what information is necessary to keep.
“You’re only as good as your weakest link. For us, it all came down to one click on a link and everything unravelled. We never thought we’d be hacked by people on the other side of the world, but it can happen to anyone.” - Alison Milisits, Vili's Family Bakery