Australian Cyber Aware – As It Was 2606 – June 2026. Aggregated listing of Australian and New Zealand cybersecurity, privacy, and AI risks developments identified during June 2026. It includes cybersecurity incidents, regulatory updates, news stories, audit findings, and broader industry developments relevant to business and government audiences.
Australian Cyber Aware – As It Was 2606 – June 2026. Aggregated listing of Australian and New Zealand cybersecurity, privacy, and AI risks developments identified during June 2026. It includes cybersecurity incidents, regulatory updates, news stories, audit findings, and broader industry developments relevant to business and government audiences.
Microsoft Copilot is gaining traction across the not-for-profit (NFP) sector, offering appealing benefits: reduced administrative effort, more … [...]
The Office of the Australian Information Commissioner (OAIC) has published updated guidance for entities considering using facial recognition … [...]
Friday 14 August 2026 A routine attempt to secure a place in a popular gym class has highlighted a growing challenge in the age of artificial … [...]
There are warnings that AI scribes are hallucinating details about patients during consultations with doctors. A scribe incorrectly recorded a woman as using illicit drugs, while another listed the wrong [...]
The ASX-listed company says it is still investigating the cyber breach as it brings its systems back online.The post Nick Scali manually processes … [...]
Measure 1 Exemptions Framework: We supported the development of a clearer and more flexible exemptions framework for entities, or classes of … [...]
Australian boards should treat the foreign ownership, control and influence of their artificial intelligence (AI) providers as a cyber risk in its … [...]
GNGB chief executive Michelle Bower said the exercise had become a bellwether for cooperation across the sector on cyber preparedness. The Gateway … [...]
Alleged 386-gigabyte data breach includes employee passports, medical reports, and salary data. • Tue, 11 Aug 2026 • Security *]:clear-none … [...]
The Australian Prudential Regulation Authority (APRA) has commenced Federal Court proceedings against Bendigo and Adelaide Bank, seeking approval for … [...]
The Australian Federal Police is assessing a report of a potential crime after the owner of two undersea cables laid in protection zones near Perth … [...]
Two subsea cables off the coast of Perth, vital for international communications, suffered a fault over the weekend, and the company that owns them … [...]
Australians providing sensitive information about their sexual orientation, religion and income in the upcoming census survey are being reassured … [...]
An Australian-first trial of live AI facial recognition technology by a police force has been criticised by privacy experts and legal advocates. The … [...]
Three weeks ago, Origin Energy told 900,000 former and current customers that their information had been exposed in a data breach. The major … [...]
An AI agent has hacked a gym website in Australia, becoming the first known case of an autonomous AI cyber attack. The AI assistant found a way to book gym [...]
Andrew asked his personal assistant to book him a spot in one of his gym's coveted morning classes. It was a task he thought was well suited to this … [...]
Multiple government departments have issued warnings ahead of the 2026 census, cautioning people to stay vigilant as scammers look to take advantage … [...]
Claim 14-Aug-26 AU NSW
[Unconfirmed] Ollies Place Kidswear has been listed by thegentlemen ransomware group
New South Wales retailer Ollies Place Kidswear has been listed on TheGentleman's breach site. No details of the breach or sample files could be located.
Published 14-Aug-26 AU NSW
Exclusive: Australian truck trailer company Midland among dozens of victims listed by Cl0p cyber extortion group
Midland was listed on 12 August, with Cl0p claiming to have accessed half a gigabyte of data, which the hackers claim includes project information and at least one database.
Confirmed 14-Aug-26 AU NSW
Aussie furniture company Nick Scali discloses cyber incident
Furniture retailer Nick Scali has said it is investigating a security incident in a disclosure to the Australian Stock Exchange. The company was forced to take “certain systems” offline in the wake of a cyber attack, and customer orders were impacted.
Claim 13-Aug-26 AU VIC
[Unconfirmed] SIA Medical Centre listed by Rhysida ransomware group
Victorian health provider SIA Medical Centre has been listed by threat actor Rhysida as being breached. Rhysida posted sample documents and claimed to have exfiltrated 20,000 patient records, staff identity documents, plaintext credentials, and HR/Legal and finance records.
Claim 13-Aug-26 AU VIC
[Unconfirmed] Ransomware group Storm publicly claimed responsibility for a cyberattack against 3-point Australia
Victorian project management consultancy 3-point Australia has been reported breached by threat actor Storm. Storm listed various documents, including passports, as evidence of the exfiltration.
Claim 12-Aug-26 AU VIC
[Unconfirmed] Incransom Targets Brighton East Dental Clinic with ransomware attack Victorian medical provider
Brighton East Dental Clinic has been listed on threat actor Icransom site claiming to have exfiltrated 37GB of data. No information is available about what the data includes.
12-Aug-26 AU NSW
AONSW Multiple Agencies
AUDIT: Internal controls and governance 2026: grants, consultants, purchasing cards and technology
Less than half of agencies reported compliance with requirements to protect and govern their risk exposure. Some agencies did not assess risks from legacy systems that cannot be patched, increasing their exposure to cyber-attack.
12-Aug-26 AU TAS
AuditTas Finance Multiple Agencies
AUDIT: Auditor-General’s Report on the Financial Statements of State Entities 2025-26, Volume 1
Our audits continue to identify recurring weaknesses in core control disciplines. These issues have been reported repeatedly over several years and should no longer be regarded as emerging challenges. They are known risks requiring sustained management attention. This includes matters on cyber security and information technology. However, due to the sensitive nature of these matters, only limited detail has been included in the report to avoid identifying potential security vulnerabilities.
Published 03-Aug-26 AU VIC
Exclusive: Qilin claims breach of Victoria-based flooring firm
Asset Flooring Group was listed on the dark web by the infamous Qilin ransomware group overnight, with the threat actor claiming to have stolen 45 gigabytes of data.
If you believe any information in this post is inaccurate or incomplete, please contact us so we can review the matter. Parties with additional relevant information relating to the incident are also invited to get in touch.
Australian Insurer Ransomware Attack, 07 January 2026 Queensland-based rental car insurer Prosura...
Australian Medical Ransomware Attack, 06 Jun 2025: Victorian based Ascot Vale Health Group targeted by Global ransomware group. Global ransomware group has so far not listed how much data it has allegedly stolen or what kind of data may have been compromised.
Australian Racing Industry Ransomware Attack, 05 Jun 2025: Victorian based RISE Racing confirms Sarcoma ransomware attack. Reports indicate that 1.6GB of sensitive data was stolen, including: Banking details, financial records, participant personal information and operational data related to the racing industry.
Australian Accounting Firm Ransomware Attack, 16 May 2025: Victorian MKA Accountants confirms Qilin ransomware attack. Qilin published 12 documents as part of its leak post, including internal correspondence, financial statements, and insurance information
Australian Cyber Incident – Court Data Breach, 26 March 2025: NSW court website involved in major data breach, 9,000 documents downloaded. Man charged in connection with court document data breach.
Incident – Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
NZ Incident – Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
Updated Incident – Medical Data Breach, 19 February 2025: Australian IVF provider Genea in cyber incident. Genea patients frustrated by lack of communication amid data breach.
Incident – University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
NZ Incident – Medical Ransomware Attack, 13 February 2025: KillSec claims ransomware attack on New Zealand based Obex Medical. While the exact details of the breach remain unclear, this latest incident highlights the persistent threat of ransomware groups, particularly those focused on industries like healthcare.
Quotes and Memes: "Complexity creates confusion, simplicity focus." - Edward de Bono
