Australian Cyber Aware
Providing Australian alerts, news and GRC services focused on cybersecurity, information security, privacy, and AI security.
Please follow the Source link to the original article to support the content owner. We provide only a summary with metadata to assist with categorisation.
Monthly Australian Cyber News Summary
Latest
Australian Info & Cyber Security News
The ACT government is stressing vigilance after a cybersecurity breach of a booking platform for campgrounds in territory parks and reserves. The … [...]
Shifting Australia's dependence away from US technology companies towards a more resilient and sovereign digital infrastructure will require … [...]
Australians woke up this morning to a global outage affecting numerous Microsoft products used in hundreds of millions of workplaces around the world. … [...]
A West Australian property buyer has lost nearly $200,000 after scammers intercepted mortgage broker communications and redirected settlement … [...]
The Victorian Curriculum and Assessment Authority refutes hackers’ exam claims, says “no evidence” that exams were compromised. • Thu, 12 Nov 2026 • … [...]
The transport minister has expressed concerns that Qantas’ outsourcing plans may jeopardise the airline’s cyber security. Jake Nelson • Fri, 13 Nov … [...]
Key points The federal government is proposing a new AI safety regulator to manage risks posed by frontier models and AI agents, following an incident … [...]
A global widespread outage is affecting Microsoft platforms today with the company confirming a large number of its servers are unexpectedly … [...]
Microsoft is scrambling to fix a disruptive global outage that has left millions of users around the world unable to access its online services. National AI reporter Cam Wilson says [...]
A Melbourne mum has revealed how hackers used her stolen identity for a chilling shopping spree, costing her business $50,000 amid fears over rising … [...]
The Prime Minister Anthony Albanese announces AI safeguards alongside Deputy Prime Minister Richard Marles and Home Affairs Minister Tony Burke. Subscribe: http://ab.co/1svxLVE Read more here: https://www.abc.net.au/ Note: In most cases, [...]
In June, the Australian Signals Directorate announced it will retire the Essential Eight over the next two years and replace it with a broader Essentials series. So what changes for [...]
From 12 October 2026, students, teachers, parents, visitors and contractors have been prohibited from using or storing smart glasses on Western … [...]
Australian Privacy Principle 3.6 requires you to collect personal information only from the individual, unless collecting it that way is unreasonable… [...]
OpenAI appears to have broken no laws when a rogue artificial intelligence agent gained unauthorised access to Medicare data, with the federal … [...]
The school says the system holding permission forms was affected by the attack, as the Qilin ransomware group threatens to publish data online. • Tue, … [...]
The Victorian healthcare provider says patient data was compromised as an investigation into the scope of the incident continues. • Thu, 05 Nov 2026 • … [...]
Australian toilet paper company Who Gives A Crap has warned customers their personal information was accessed without authorisation following a cyber … [...]
Australian Cyber Incidents and Audits Reports
November 2026 so far
Confirmed 12-Nov-26 AU Qld
Personal user data breached after Qld, Victoria and SA's National Park booking systems hacked
Hackers have stolen personal user information from Queensland, Victoria and South Australia's National Parks booking systems.
Queensland based Bookeasy processes camping and vehicle access permits for the National Parks Booking System, storing personal emails, addresses, and phone numbers.
Confirmed 11-Nov-26 AU VIC
VCAA investigating after website hacked during student exam period
The Victorian Curriculum and Assessment Authority (VCAA) says there is no indication exam papers have been accessed after its website was hacked.
The website remained down this morning after being hacked on Wednesday evening. The hacker claimed to have downloaded 2026 exam papers and distributed them, but VCAA CEO Andrew Smith said there was no sign of this.
Claim 10-Nov-26 AU NT
[Unconfirmed] New ransomware group Hyflock listed Australian accounting and financial services firm TCA Accountants & Bookkeepers
Darwin based accounting and financial firm, TCA Accountants & Bookkeepers, has been listed by ransomware group Hyflock. No supporting information was posted to support the claim.
Confirmed 08-Nov-26 AU VIC
Who Gives A Crap confirms customer data exposed in software breach
Customers of Australian toilet paper company Who Gives A Crap (WGAC) have been told their personal information may have been accessed in a third-party cyber security incident. The data included customers' first and last names, email addresses, phone numbers, mailing addresses and the total amount spent with the company.
Claim 05-Nov-26 AU QLD
[Unconfirmed] Ransomware group Qilin, has claimed to have breached Queensland school, Calvary Christian College
Calvary Christian College was listed on the qilin ransomware leak site in November 2026. The organisation operates in the Education sector in Australia. The listing contained no supporting evidence of the breach.
04-Nov-26 AU
ACMA, Telcommunications, Spam Act 2003
SpinTel pays $653K penalty for spamming former customers
Australian telco SpinTel Pty Ltd (SpinTel) has paid a $653,400 penalty after sending more than 32,000 commercial emails without consent. An Australian Communications and Media Authority (ACMA) investigation found that between July and September 2025, SpinTel sent marketing emails to former customers encouraging them to return to the telco and promoted its products, including its NBN and mobile service plans.
Claim 04-Nov-26 AU VIC
[Unconfirmed] Prospect Hill Camberwell , a retirement village based in Australia has been listed by SafePay ransomware group
Threat actor SafePay has listed Victorian based retirement village operator, Prospect Hill Camberwell, as being breached by their teams. No corroborating information has been provided.
Claim 04-Nov-26 AU Qld
[Unconfirmed] The Southern Cross Digital an Australian ad management company, has been listed by Soul ransomware group
Southern Cross Digital a Google and Facebook ad management for Queensland businesses, has a data breach listed by threat actor group Soul. The breach has not been independently verified.
Confirmed 04-Nov-26 AU NSW
Police investigate cybersecurity breach of NSW Health's Oral Health Fee For Service Scheme website
The NSW Health website impacted by the breach is the Oral Health Fee For Service Scheme. Police are investigating the incident, with Cyber Security NSW saying no patient data has been compromised.
Confirmed 03-Nov-26 AU NSW
Exclusive: Sydney-based First State Auctions customer data impacted by cyber incident
A Sydney-based luxury auction house, First State Auctions, has confirmed it recently responded to a cyber security incident after it was mentioned in connection with a data breach on a popular underground hacking forum.
A hacker posting under the name sexyskin claimed to be in possession of more than 1 million lines of customer data comprising names, emails, phone numbers, and address details in October.
Published 03-Nov-26 AU NSW
Qantas customer data possibly exposed in Amadeus hack
Qantas says it has been potentially impacted by a data breach affecting global travel technology provider Amadeus. Amadeus, which services around 141 global airlines, has reportedly advised its clients that no payment or financial data was accessed, though other personal details may have been exposed.
Confirmed 02-Nov-26 AU VIC
HealthShare’s $50M Tender Dies After Pricing Leak
The HealthShare Victoria tender breach involved a data leak that exposed confidential pricing spreadsheets of competing bidders. This breach, which occurred over a multi-month period, was caused by a human error by one medical device company that accessed the pricing information multiple times. The breach was discovered in August 2026, after a supplier raised the alarm in February. The company, referred to as the "disclosee" in government correspondence, was allowed to continue competing for the contract despite the breach. HealthShare Victoria terminated the tender process to ensure competitive fairness, but bidders were not compensated for their preparation costs.
If you believe any information in this post is inaccurate or incomplete, please contact us so we can review the matter. Parties with additional relevant information relating to the incident are also invited to get in touch.
Australian InfoSec Incidents and Audits Issues
Incident: Insurer Prosura hit by cyber data breach, customers contacted by ‘threat actor’ | ABC Australia
Australian Insurer Ransomware Attack, 07 January 2026 Queensland-based rental car insurer Prosura...
Incident: Ascot Vale Health Group targeted by Global ransomware group | CyberDaily.au
Australian Medical Ransomware Attack, 06 Jun 2025: Victorian based Ascot Vale Health Group targeted by Global ransomware group. Global ransomware group has so far not listed how much data it has allegedly stolen or what kind of data may have been compromised.
Incident: RISE Racing confirms Sarcoma ransomware attack | CyberDaily.au
Australian Racing Industry Ransomware Attack, 05 Jun 2025: Victorian based RISE Racing confirms Sarcoma ransomware attack. Reports indicate that 1.6GB of sensitive data was stolen, including: Banking details, financial records, participant personal information and operational data related to the racing industry.
Incident: MKA Accountants confirms Qilin ransomware attack | CyberDaily.au
Australian Accounting Firm Ransomware Attack, 16 May 2025: Victorian MKA Accountants confirms Qilin ransomware attack. Qilin published 12 documents as part of its leak post, including internal correspondence, financial statements, and insurance information
Incident: NSW court website involved in major data breach, 9,000 documents downloaded | ABC News (Australia)
Australian Cyber Incident – Court Data Breach, 26 March 2025: NSW court website involved in major data breach, 9,000 documents downloaded. Man charged in connection with court document data breach.
Incident: Brydens Lawyers suffers alleged 600GB data breach following ransomware attack | cyberdaily.au
Incident – Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
NZ Incident: Kiwi car dealership Tristram European listed by DragonForce ransomware | Cyberdaily.au
NZ Incident – Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
Incident: Australian IVF provider Genea in cyber incident | iTnews
Updated Incident – Medical Data Breach, 19 February 2025: Australian IVF provider Genea in cyber incident. Genea patients frustrated by lack of communication amid data breach.
Incident: Australian National University investigating alleged cyber attack | Cyberdaily.au
Incident – University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
NZ Incident: KillSec claims breach of NZ medical supplier | Cyberdaily.au
NZ Incident – Medical Ransomware Attack, 13 February 2025: KillSec claims ransomware attack on New Zealand based Obex Medical. While the exact details of the breach remain unclear, this latest incident highlights the persistent threat of ransomware groups, particularly those focused on industries like healthcare.
Information Security Memes
Security quotes and wisdoms
- Quotes
Quote: Abraham Lincoln “You cannot escape the responsibility….”
“You cannot escape the responsibility of tomorrow by evading it today.” –...
