Australian Cyber Aware - As It Was 2606 - June 2026. Aggregated listing of Australian and New Zealand cybersecurity, privacy, and AI risks developments identified during June 2026. It includes cybersecurity incidents, regulatory updates, news stories, audit findings, and broader industry developments relevant to business and government audiences.
The Australian Privacy Commissioner has published a report of the OAIC’s preliminary inquiries into the 2025 Qantas Airways Limited (Qantas) data … [...]
For not-for-profits (NFP), trust is built not only on mission, but on how personal information is handled. As privacy expectations rise and AI … [...]
Directors are now expected to oversee cyber risk, but many still struggle with what effective oversight looks like. Here’s how GCs can make the … [...]
Australian GP network says patient healthcare data, including Medicare and DVA numbers, was accessed after a “malicious actor accessed some of our … [...]
Telstra is facing fresh scrutiny after confirming that a software error caused a nationwide outage. Technology reporter Cameron Wilson explains how a failure in the network's timekeeping system disrupted Telstra's [...]
.jpg)
AI agents are rapidly becoming a staple of the enterprise identity landscape. Yet, many organisations are deploying them faster than they can govern … [...]
Australia’s top mobile carriers have cautiously supported expanding emergency communications beyond voice calls but warned that it will require … [...]
JB Hi-Fi Group has appointed Kanchana Devi as its head of group cyber security following the departure of Daniel Eastley in April. Devi announced her … [...]
Australia will create an office at the heart of government to manage the development of AI standards, seeking to balance the need to attract … [...]
The threat actor, known as 2019, offers employee and volunteer staff data on a hacking forum, while Lifeline says some data is “doctored to include … [...]
What's happening Scammers are sending fake messages that say you bought something you didn’t buy and tells you to call a phone number to stop or … [...]
A much-anticipated digital version of Australia’s Incoming Passenger Card for international arrivals will be rolled out nationally over the next 18 … [...]
Failure to replace a 20-year-old server worth $30,000 could cost Telstra $30 million in fines, with executives set to face a Senate inquiry this week … [...]
The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) has issued an alert about a “large-scale exploitation campaign” … [...]
The threat actor behind a string of hacks targeting Australian organisations claims to have compromised the personal and sales data of more than … [...]
The Australian Cyber Security Centre (ACSC) should evolve into a formal cybersecurity regulator, with a role comparable in principle to what the … [...]
Hackers behind the Mackay Sugar breach list Australian gourmet food supplier on darknet leak site. • Fri, 10 Jul 2026 • Security *]:clear-none … [...]
Published 13-Jul-26 A NSW
Exclusive: Prolific hacker 2019 selling alleged Hot Toner Australia customer data online
The threat actor, who calls themselves 2019, posted details of data they allege was stolen from Hot Toner Australia, a company that specialises in printer consumables.
Confirmed 10-Jul-26 AU QLD
Hacked! Royal Foods confirms cyber incident following The Gentlemen ransomware claims
"Royal Foods is investigating a recent incident in which an unauthorised third party accessed elements of our internal IT environment associated with administrative functions," the spokesperson said.
The Gentlemen shared no other details regarding the data allegedly breached, nor its volume.
Claim 11-Jul-26 AU WA
Unconfirmed: Ransomware group Dragonforce hits Western Australian company Access Group Hire
Dragonforce have claimed to have breached equipment hire firm Access Hire Australia. Publishing a limited set of data showing invoices, customer credit checks and customer hire list.
Claim 02-Jul-26 AU NSW
Unconfirmed: Qilin Ransomware Strikes Pennant Hills Golf Club
A newly surfaced victim listing naming Pennant Hills Golf Club shows how ransomware operators turn public exposure into pressure, even when the underlying compromise has not been independently established.
If you believe any information in this post is inaccurate or incomplete, please contact us so we can review the matter. Parties with additional relevant information relating to the incident are also invited to get in touch.
Australian Insurer Ransomware Attack, 07 January 2026 Queensland-based rental car insurer Prosura...
Australian Medical Ransomware Attack, 06 Jun 2025: Victorian based Ascot Vale Health Group targeted by Global ransomware group. Global ransomware group has so far not listed how much data it has allegedly stolen or what kind of data may have been compromised.
Australian Racing Industry Ransomware Attack, 05 Jun 2025: Victorian based RISE Racing confirms Sarcoma ransomware attack. Reports indicate that 1.6GB of sensitive data was stolen, including: Banking details, financial records, participant personal information and operational data related to the racing industry.
Australian Accounting Firm Ransomware Attack, 16 May 2025: Victorian MKA Accountants confirms Qilin ransomware attack. Qilin published 12 documents as part of its leak post, including internal correspondence, financial statements, and insurance information
Australian Cyber Incident – Court Data Breach, 26 March 2025: NSW court website involved in major data breach, 9,000 documents downloaded. Man charged in connection with court document data breach.
Incident – Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
NZ Incident – Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
Updated Incident – Medical Data Breach, 19 February 2025: Australian IVF provider Genea in cyber incident. Genea patients frustrated by lack of communication amid data breach.
Incident – University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
NZ Incident – Medical Ransomware Attack, 13 February 2025: KillSec claims ransomware attack on New Zealand based Obex Medical. While the exact details of the breach remain unclear, this latest incident highlights the persistent threat of ransomware groups, particularly those focused on industries like healthcare.
Quotes and Memes: "Complexity creates confusion, simplicity focus." - Edward de Bono
