Codan's experience provides a rare look at the longer-term impacts of hacking on companies, as most keep the extent of incidents under wraps. In fact, experts say many firms continue to turn a blind eye to cybersecurity even as hackers become increasingly sophisticated. A PriceWaterhouseCoopers report found the average information security budget dropped 4 per cent to $US4.1 million last year, reversing a three-year trend of rising funds to tackle cybercrime. That was even as the total number of detected security incidents jumped 48 per cent to 42.8 million globally, PWC said. Bryce Boland, chief technology officer for Asia at cyber-security firm FireEye, said many companies are too focused on the reverse engineering capabilities of Chinese companies, which allow them to copy products within weeks of their public launch. "They may be good at reverse engineering but they're much better at just getting the plans during the development phase (via hacking) and leveraging those immediately," Boland said by telephone from Singapore. Codan began to realise it had a problem when it started receiving faulty metal detectors back into its services centre in 2011. Those products, stamped with the Codan logo, had unrecognisable, inferior parts. Then the Australian Security Intelligence Organisation (ASIO) came knocking: a Codan employee's laptop had been hacked into when he logged on using hotel wifi during a business trip to China. With an African gold rush underpinning demand for the metal detectors, Codan's blueprints had been filched by a Chinese manufacturing chain. McGurk asked the Australian government for help, requesting they speak to Chinese authorities, but discovered his company was on its own. McGurk believes a landmark free trade deal with China, recently signed after more than a decade of negotiations, was responsible. "No one wants to muddy the waters by putting in play something that's negative," he said. The company instead spent "significant sums" on private investigators, who worked with China police to track the supply chain of the counterfeit metal detectors. They discovered it led to Dubai, where police raids found "significant" numbers of counterfeit gold detectors in storage, en route to Sudan, Guinea and Niger. China meted out jail terms of up to two years for the principals of three first-tier manufacturing companies in the supply chain, while Dubai fined several players around $5000 each, McGurk said. Codan, meanwhile, was forced to slash the price of its gold detectors from around $4000-$5000 to around $2500 to compete with the counterfeiters. The company's net profit collapsed to $9.2 million in the year to June 30, 2014, from $45 million a year earlier as a result. China's infiltration of private online business has returned to the spotlight this month after United States officials blamed Chinese hackers for compromising the records of up to four million current and former government employees. China has called the US comments irresponsible, while President Barack Obama vowed that the US would aggressively bolster its cyber defences. Behind these public state-level spats, many companies are fighting a quieter battle where the front keeps changing. FireEye said it uncovered a hacking campaign in June by a China-based group it calls APT3, targeting organisations in the aerospace and defense, construction and engineering, high tech, telecommunications and transportation industries. FireEye says APT3 engages in "phishing", a technique of sending company employees innocuous emails containing website addresses which trick them into downloading programs that automatically lead to protected information. It says APT3 is especially sophisticated because it constantly changes online identities, making it difficult to track. Codan is ramping up its defences. The company is introducing encrypted products, employs three or four people to work full-time on preventing hacking-led counterfeiting and has a lawyer whose sole role is to coordinate those efforts. "I don't think you could ever presume it's behind you, but now we're in a position to understand what's happened," McGurk said. "It's like playing Whack-A-Mole. They just pop up somewhere else." Reuters
The Chinese have been pillaging intellectual property and corporate secrets from the West through hacking the servers of targeted companies : to the tune of $ 160bn worth every year . But what happens to the corporate post - hack ? An Australian maker of metal - detectors , Codan , tells the following tale of woe . Back in 2006 the company started receiving complaints about faulty metal detectors : problem was that they were n't Codan 's metal detectors . The tools carried their brand and externally looked similar , but inside many of the parts were unrecognised and inferior - it was a Chinese - thing . Then the company was told that an employee 's laptop had been hacked whilst he was on a business trip to mainland China : inside the laptop were the parts of Codan 's next design . Counterfeit detectors soon started to swamp the market and Codan had to half its prices to compete . Meantime demand started to dry up and within a year the company 's sales had dropped from A$ 20 to A$ 9.2mn : and the company is still reeling . The Australian Government did n't want to get involved as it was trying to finalise a " free trade " agreement with the Chinese : as the company 's CEO tells it , " you are on your own " .