Australian Cyber Aware - As It Was 2606 - June 2026. Aggregated listing of Australian and New Zealand cybersecurity, privacy, and AI risks developments identified during June 2026. It includes cybersecurity incidents, regulatory updates, news stories, audit findings, and broader industry developments relevant to business and government audiences.
Subscribe to gift this article Gift 5 articles to anyone you choose each month when you subscribe. Already a subscriber? [...]
The Office of the Australian Information Commissioner (OAIC) has published updates to its guidance for Australian Privacy Principle (APP) entities … [...]
Threat detection and reporting Internal policies and procedures What policies or procedures must organisations have in place to protect data or … [...]
The Office of the Australian Information Commissioner (OAIC) received 1,205 data breach notifications in 2025, the highest number since Australia's … [...]
This synchronised approach to AI risks from the various Australian regulators was built upon by the Australian Government’s announcement in mid-July … [...]
Key takeaways Despite a data breach affecting approximately 5.12 million Australians, the OAIC declined to open a formal investigation into Qantas, … [...]
Almost 30,000 lines of court data have potentially been compromised in a breach carried out by a prominent hacker, 2019. • Thu, 30 Jul 2026 • … [...]
Threat actors have claimed a cyber attack on a Tasmanian multi-technology and building services firm and are now auctioning allegedly stolen data to … [...]
The latest Australian Cybercrime Survey shows overall victimisation has fallen slightly, but online scams continue to rise while most incidents … [...]
Abuse survivors who gave evidence to a Victorian parliamentary inquiry into cults and fringe groups say they feel exposed after their email addresses … [...]
Artificial intelligence is being used in more than half of Australian GP clinics to transcribe medical consultations and generate clinical notes, raising concerns about patient privacy and data protection. A [...]
The Australian Communications and Media Authority (ACMA) has commenced proceedings against Optus Mobile in the Federal Court for their 18 September 2025 network outage. This outage hindered Optus mobile users [...]
Origin Energy executives argued against tougher new cybersecurity obligations earlier this year, labelling proposed changes to critical … [...]
The nation's second largest telco, Optus, is being sued in the Federal Court over last year's major network outage in which calls failed to reach … [...]
An NSW Health employee has been charged after reports of accessing and downloading patient data without permission. • Wed, 29 Jul 2026 • … [...]
Your face could be your next big ticket. With a scan of it, you could be granted entry to AFL games, concerts or even conferences. Facial recognition … [...]
The problem with legacy technology is not that organisations do not know the risks. It is that no mechanism forces a decision. Ownership is … [...]
The Australian Signals Directorate (ASD) has released detailed technical guidance instructing critical infrastructure operators on how to fully … [...]
.....Â
Â
If you believe any information in this post is inaccurate or incomplete, please contact us so we can review the matter. Parties with additional relevant information relating to the incident are also invited to get in touch.
Australian Insurer Ransomware Attack, 07 January 2026 Queensland-based rental car insurer Prosura...
Australian Medical Ransomware Attack, 06 Jun 2025: Victorian based Ascot Vale Health Group targeted by Global ransomware group. Global ransomware group has so far not listed how much data it has allegedly stolen or what kind of data may have been compromised.
Australian Racing Industry Ransomware Attack, 05 Jun 2025: Victorian based RISE Racing confirms Sarcoma ransomware attack. Reports indicate that 1.6GB of sensitive data was stolen, including: Banking details, financial records, participant personal information and operational data related to the racing industry.
Australian Accounting Firm Ransomware Attack, 16 May 2025: Victorian MKA Accountants confirms Qilin ransomware attack. Qilin published 12 documents as part of its leak post, including internal correspondence, financial statements, and insurance information
Australian Cyber Incident – Court Data Breach, 26 March 2025: NSW court website involved in major data breach, 9,000 documents downloaded. Man charged in connection with court document data breach.
Incident – Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
NZ Incident – Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
Updated Incident – Medical Data Breach, 19 February 2025: Australian IVF provider Genea in cyber incident. Genea patients frustrated by lack of communication amid data breach.
Incident – University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
NZ Incident – Medical Ransomware Attack, 13 February 2025: KillSec claims ransomware attack on New Zealand based Obex Medical. While the exact details of the breach remain unclear, this latest incident highlights the persistent threat of ransomware groups, particularly those focused on industries like healthcare.
Quotes and Memes: "Complexity creates confusion, simplicity focus." - Edward de Bono
