Australian Cyber Aware - As It Was 2606 - June 2026. Aggregated listing of Australian and New Zealand cybersecurity, privacy, and AI risks developments identified during June 2026. It includes cybersecurity incidents, regulatory updates, news stories, audit findings, and broader industry developments relevant to business and government audiences.
The threat actor, known as 2019, offers employee and volunteer staff data on a hacking forum, while Lifeline says some data is “doctored to include … [...]
What's happening Scammers are sending fake messages that say you bought something you didn’t buy and tells you to call a phone number to stop or … [...]
A much-anticipated digital version of Australia’s Incoming Passenger Card for international arrivals will be rolled out nationally over the next 18 … [...]
Failure to replace a 20-year-old server worth $30,000 could cost Telstra $30 million in fines, with executives set to face a Senate inquiry this week … [...]
The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) has issued an alert about a “large-scale exploitation campaign” … [...]
The threat actor behind a string of hacks targeting Australian organisations claims to have compromised the personal and sales data of more than … [...]
The Australian Cyber Security Centre (ACSC) should evolve into a formal cybersecurity regulator, with a role comparable in principle to what the … [...]
Hackers behind the Mackay Sugar breach list Australian gourmet food supplier on darknet leak site. • Fri, 10 Jul 2026 • Security *]:clear-none … [...]
The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) has issued a critical alert following a large-scale cyber campaign … [...]
Sky News host Jaimee Rogers says the Telstra outage is a warning for how dangerous a deliberate attack on Australia’s telecommunications could be. “Communications are critical infrastructure, so why aren't [...]
The CEO of Telstra has returned from leave following the outage impacting its services, having now issued an apology for the issues caused. • Fri, 10 … [...]
Maryam Shoraka has been named the 2026 Global Cybersecurity AI Ethics Woman of the Year, recognising her work at the intersection of cyber security … [...]
Cyber and Infrastructure Security Centre Website Protecting Australia's Cyber and Infrastructure Security. [...]
Telstra has implemented a fresh "solution" to resolve a secondary software defect that left hundreds of customers unable to make Triple Zero calls … [...]
In critical infrastructure, the most dangerous breach is not always the one that breaks a firewall. Sometimes it is the one that looks like normal … [...]
Victoria's regional rail network remains at a standstill following a nationwide telecommunications outage yesterday that stranded commuters. Passengers are being urged not to travel on V/Line services if possible. Telstra [...]
Experts and advocates have demanded changes to how telecommunication companies are regulated and held accountable for outages after Telstra became … [...]
Extortionists have sent the parents of a missing West Australian man an AI-generated image of their son and demanded thousands of dollars in exchange … [...]
Published 13-Jul-26 A NSW
Exclusive: Prolific hacker 2019 selling alleged Hot Toner Australia customer data online
The threat actor, who calls themselves 2019, posted details of data they allege was stolen from Hot Toner Australia, a company that specialises in printer consumables.
Confirmed 10-Jul-26 AU QLD
Hacked! Royal Foods confirms cyber incident following The Gentlemen ransomware claims
"Royal Foods is investigating a recent incident in which an unauthorised third party accessed elements of our internal IT environment associated with administrative functions," the spokesperson said.
The Gentlemen shared no other details regarding the data allegedly breached, nor its volume.
Claim 11-Jul-26 AU WA
Unconfirmed: Ransomware group Dragonforce hits Western Australian company Access Group Hire
Dragonforce have claimed to have breached equipment hire firm Access Hire Australia. Publishing a limited set of data showing invoices, customer credit checks and customer hire list.
Claim 02-Jul-26 AU NSW
Unconfirmed: Qilin Ransomware Strikes Pennant Hills Golf Club
A newly surfaced victim listing naming Pennant Hills Golf Club shows how ransomware operators turn public exposure into pressure, even when the underlying compromise has not been independently established.
If you believe any information in this post is inaccurate or incomplete, please contact us so we can review the matter. Parties with additional relevant information relating to the incident are also invited to get in touch.
Australian Insurer Ransomware Attack, 07 January 2026 Queensland-based rental car insurer Prosura...
Australian Medical Ransomware Attack, 06 Jun 2025: Victorian based Ascot Vale Health Group targeted by Global ransomware group. Global ransomware group has so far not listed how much data it has allegedly stolen or what kind of data may have been compromised.
Australian Racing Industry Ransomware Attack, 05 Jun 2025: Victorian based RISE Racing confirms Sarcoma ransomware attack. Reports indicate that 1.6GB of sensitive data was stolen, including: Banking details, financial records, participant personal information and operational data related to the racing industry.
Australian Accounting Firm Ransomware Attack, 16 May 2025: Victorian MKA Accountants confirms Qilin ransomware attack. Qilin published 12 documents as part of its leak post, including internal correspondence, financial statements, and insurance information
Australian Cyber Incident – Court Data Breach, 26 March 2025: NSW court website involved in major data breach, 9,000 documents downloaded. Man charged in connection with court document data breach.
Incident – Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
NZ Incident – Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
Updated Incident – Medical Data Breach, 19 February 2025: Australian IVF provider Genea in cyber incident. Genea patients frustrated by lack of communication amid data breach.
Incident – University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
NZ Incident – Medical Ransomware Attack, 13 February 2025: KillSec claims ransomware attack on New Zealand based Obex Medical. While the exact details of the breach remain unclear, this latest incident highlights the persistent threat of ransomware groups, particularly those focused on industries like healthcare.
Quotes and Memes: "Complexity creates confusion, simplicity focus." - Edward de Bono
