Australian Cyber Aware - As It Was 2606 - June 2026. Aggregated listing of Australian and New Zealand cybersecurity, privacy, and AI risks developments identified during June 2026. It includes cybersecurity incidents, regulatory updates, news stories, audit findings, and broader industry developments relevant to business and government audiences.
In brief As many as 4.8 million Origin Energy customers could be affected by a cyber attack that exposed personal data. • Experts have warned the fallout … [...]
Origin Energy has confirmed that unauthorised access to customer information has occurred, marking what is believed to be the largest publicly known … [...]
What should I do? It should not take the emergence of frontier AI models to motivate a revisit of your organisation’s current cyber posture. It’s … [...]
Insider security risks: a frequently overlooked threat Cyber security and privacy controls are usually thought of as ways to protect from external … [...]
The AICD, in partnership with the Human Technology Institute (HTI) at the University of Technology Sydney, has updated its key artificial … [...]
Energy company Origin has confirmed there has been unauthorised access to and disclosure of some customers' data. In a statement released via the ASX, … [...]
Origin Energy has confirmed the personal information of some of its customers has been stolen in a suspected cyber hack. The energy giant said in a … [...]
The Joint Policing Cybercrime Coordination Centre has warned that criminals are using artificial intelligence to create highly convincing investment … [...]
Origin Energy, Australia's biggest power provider, is investigating a suspected cyber attack affecting up to 5 million Australians. A hacker calling himself John Doe claims to have stolen personal data [...]
Origin Energy says an investigation has been launched into a potential hacking incident with reports two million customers could have been affected. The company has 4.8 million customers. The nation's [...]
One of Australia's largest energy companies, Origin Energy, says it is investigating a security breach that "may have" affected customer data. "Origin … [...]
Origin Energy is investigating a potential cyber hack that may have compromised the data of some customers. In a statement, the major energy provider … [...]
Threat actors have claimed a cyber attack on an NSW-based accounting and advisory firm and are threatening to leak allegedly stolen data in just a … [...]
Parents were told a court order has been issued “prohibiting the publication, disclosure, transmission, use, or further dissemination of data … [...]
Another medical clinic has revealed it has been targeted by hackers, less than a week after Partnered Health announced a major data breach. GO2 Health … [...]
Australians have got $644 million back from major banks and financial companies as the industry watchdog cracks down on failures. The Australian … [...]
Australia will tighten oversight of artificial intelligence in automated government decision-making and strengthen privacy safeguards as part of a … [...]
The federal government will move to tighten regulation of automated decision making (ADM) as a result of a new set of safety priorities for adoption … [...]
Confirmed 23-Jul-26 AU VIC
Exclusive: Aussie property management firm confirms customer data safe following hack claims
Threat actor Kairos, has claimed a cyber attack on a Melbourne-based property management firm LR Reed, having allegedly stolen data from the company.
Confirmed 22-Jul-26 AU NSW
Origin Energy investigating 'potential' customer data breach
One of Australia's largest energy companies, Origin Energy, says it is investigating a security breach that "may have" affected customer data.Â
Claim 21-Jul-26 AU VIC
[Unconfirm] Settra Ransomware Gang Claims Data Theft at Australian Collectables Retailer Downies
Ransomware group Settra publicly claimed Downies Collectables as a victim, alleging exfiltration of 550 GB of internal business data, published sample data, and a published ransom deadline.Â
Confirmed 21-Jul-26 AU QLD
GO2 Health medical clinic in Brisbane waited almost three months to alert patients it was hacked
GO2 Health, a medical clinic in Everton Park, Brisbane, was targeted by hackers in April 2026 through a phishing attack that accessed the clinic’s main email inbox.
Claim 20-Jul-26 AU NSW
[Unconfirmed] SafePay Ransomware Attack on Australian account firm AC Small & Maxwell
Threat actor SafePay has published a threat to expose data from NSW account firm AC Small & Maxwell. A deadline has been issued, but no description of the data exposed.
Confirmed 15-Jul-26 AU SA
Medical records and personal details stolen in GP network cyber attack
Partnered Health, a network of GP clinics across the country has been hit in a cyber attack, with sensitive medical records and personal information stolen.. Company statement - https://partneredhealth.com.au/partnered-health-recent-cyber-incident/
Confirmed 14-Jul-26 AU ACT
Lifeline Australia confirms staff data compromised following hacking claims
Aussie suicide-prevention charity Lifeline has confirmed it was the victim of a data breach by threat actor 2019, after details of the incident were posted to a popular underground hacking forum.
Published 13-Jul-26 AU NSW
Exclusive: Prolific hacker 2019 selling alleged Hot Toner Australia customer data online
The threat actor, who calls themselves 2019, posted details of data they allege was stolen from Hot Toner Australia, a company that specialises in printer consumables.
Confirmed 10-Jul-26 AU QLD
Hacked! Royal Foods confirms cyber incident following The Gentlemen ransomware claims
"Royal Foods is investigating a recent incident in which an unauthorised third party accessed elements of our internal IT environment associated with administrative functions," the spokesperson said.
The Gentlemen shared no other details regarding the data allegedly breached, nor its volume.
Published 11-Jul-26 AU WA
Ransomware group Dragonforce hits Western Australian company Access Group Hire
Dragonforce have claimed to have breached equipment hire firm Access Hire Australia. Publishing a limited set of data showing invoices, customer credit checks and customer hire list.
Confirmed 08-Jul-26 AU
Telstra mobile network hit by significant outage
Telstra’s mobile network is experiencing a large-scale outage impacting voice and data services on Wednesday, with users finding their phones in SOS mode. Company Updates - Our recent mobile network outage has been resolved: here’s what happened
Claim 02-Jul-26 AU NSW
Unconfirmed: Qilin Ransomware Strikes Pennant Hills Golf Club
A newly surfaced victim listing naming Pennant Hills Golf Club shows how ransomware operators turn public exposure into pressure, even when the underlying compromise has not been independently established.
Â
If you believe any information in this post is inaccurate or incomplete, please contact us so we can review the matter. Parties with additional relevant information relating to the incident are also invited to get in touch.
Australian Insurer Ransomware Attack, 07 January 2026 Queensland-based rental car insurer Prosura...
Australian Medical Ransomware Attack, 06 Jun 2025: Victorian based Ascot Vale Health Group targeted by Global ransomware group. Global ransomware group has so far not listed how much data it has allegedly stolen or what kind of data may have been compromised.
Australian Racing Industry Ransomware Attack, 05 Jun 2025: Victorian based RISE Racing confirms Sarcoma ransomware attack. Reports indicate that 1.6GB of sensitive data was stolen, including: Banking details, financial records, participant personal information and operational data related to the racing industry.
Australian Accounting Firm Ransomware Attack, 16 May 2025: Victorian MKA Accountants confirms Qilin ransomware attack. Qilin published 12 documents as part of its leak post, including internal correspondence, financial statements, and insurance information
Australian Cyber Incident – Court Data Breach, 26 March 2025: NSW court website involved in major data breach, 9,000 documents downloaded. Man charged in connection with court document data breach.
Incident – Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
NZ Incident – Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
Updated Incident – Medical Data Breach, 19 February 2025: Australian IVF provider Genea in cyber incident. Genea patients frustrated by lack of communication amid data breach.
Incident – University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
NZ Incident – Medical Ransomware Attack, 13 February 2025: KillSec claims ransomware attack on New Zealand based Obex Medical. While the exact details of the breach remain unclear, this latest incident highlights the persistent threat of ransomware groups, particularly those focused on industries like healthcare.
Quotes and Memes: "Complexity creates confusion, simplicity focus." - Edward de Bono
