Reports from 3rd April – 9th April

Commentary: More publicly reported breaches increasing the trend we are seeing this year now that the general media sees some new value in these stories. Canberra Health Services and Australian National Maritime Museum were both Insider Threat jobs (one fraud, the other unauthorised access and disclosure). Both are good reminders to tighten up your related internal controls. Tik Tok ban, Operation Cookie Monster and GoAnywhere are among the stories of the week.

Incident: IPH enters trading halt after ‘cyber incident’ | iTnews

By Steven Kirby on Apr 09, 2023 Australian Cyber Incident, 15 March 2023 IPH enters trading halt after ‘cyber incident’ Unauthorised access to the document management systems of the …

Incident: Isaacs Regional Council Cyber Attack Highlights Risks Local Governments Face | australiancybersecuritymagazine

By Steven Kirby on Apr 09, 2023 Australian Local Government Ransomware Attack, 04 April 2023 Isaacs Regional Council Ransomware Attack Highlights Risks Local Governments Face It is …

IDCARE warns new privacy laws could exacerbate ransomware attacks

By Richard Chirgwin on Apr 08, 2023 National identity support service IDCARE is critical of the federal government’s increased penalties for privacy breaches, saying they could …

Optus, Medibank privacy probes could stretch into 2024

By Ry Crozier on Apr 08, 2023 Privacy investigations stemming from the Optus and Medibank data breaches could stretch into 2024, as it emerged they’re just two of eight open …

Operation Cookie Monster shuts huge cybercrime site, Australian hackers targeted in FBI-led investigation

By ABC News on Apr 08, 2023 A global police operation has shut down one of the world’s largest online marketplaces where cybercriminals can buy stolen identities and …

Incident: Bug briefly exposed Service NSW data to other users | iTnews

By Steven Kirby on Apr 06, 2023 Australian State Government Data Breach, 04 April 2023 Bug briefly exposed Service NSW data to other users ‘technical issue’ may have exposed data of …

Video: Thousands of NSW residents face potential data breach after state government website mishap

By Sky News Australia on Apr 06, 2023 Thousands of New South Wales residents have been warned their personal data may have been exposed in a major data breach after a state government website upd…

Victoria releases cyber strategy delivery plan – Government News

By Staff Writers on Apr 06, 2023 Victoria will work towards a whole of government cyber operations model to improve risk management across the state’s public service. The objective is …

Ten Australians held after takedown of illegal cyber credentials market

By Sam Varghese on Apr 06, 2023 Ten Australians are among those arrested as part of the takedown of Genesis Market, a site which was trading in data for all kinds of malicious …

Queensland, SA to ban TikTok on government devices

By Anonymous on Apr 06, 2023 TikTok will be banned on all government devices in Queensland and South Australia but some of the states’ most influential politicians are unlikely …

Rio Tinto confirms stolen employee data posted on the dark web after GoAnywhere cyber hack, ASX finishes slightly higher — as it happened

By By business reporter Kate Ainsworth on Apr 06, 2023 How the market finished at 4:20pm AEST By Kate Ainsworth NAB now believes interest rates have peaked 18h agoWed 5 Apr 2023 at 6:47am By Michael Janda Key …

Names, addresses and bank account details potentially at risk after hack, Tasmanian government says

By ABC News on Apr 06, 2023 Financial data including names, addresses, invoices and bank account numbers may have been accessed in the cyber security breach affecting the …

Australia to ‘hit the gym’ in cyber exercises

By Anonymous on Apr 06, 2023 Nationwide cybersecurity exercises will aim to make Australia a hard target for international hackers and prevent debilitating cyber attacks on …

ANU uses role-playing game in cyber security recruitment

By Kate Weber on Apr 06, 2023 The Australian National University is using a role-playing game to help it recruit cyber security team members. The university said it had been …

Australia bans TikToK on state-owned devices

By Staff Writer on Apr 05, 2023 The federal government has confirmed it will ban TikTok on state devices over concerns about the app’s security, fearing that user data might be …

Tasmania says data may have leaked through file-sharing service attack

By Sam Varghese on Apr 05, 2023 The Tasmanian Government says it may have lost data in a breach effected by a Windows ransomware gang through a file-sharing service known as …

Gov flags cyber exercises to boost security

By Richard Chirgwin on Apr 05, 2023 Organisations covered by the Security of Critical Infrastructure Act (SOCI) will have their cyber security tested in regular exercises conducted by …

Home Affairs gets no new funding to set up national office for cyber security

By Ry Crozier on Apr 05, 2023 A new national office for cyber security is being set up with no additional funding to Home Affairs, a department that faces an ever-expanding remit …

Bug briefly exposed Service NSW data to other users

By Richard Chirgwin on Apr 04, 2023 Service NSW has apologised for a software bug that briefly allowed users to view each others’ information on the “My services” dashboard. A Service …

Password-crackers and metadata used to check Centrelink users’ relationship status

By Jeremy Nadel on Apr 04, 2023 Services Australia is using telecommunications metadata and password-bypassing software to investigate welfare recipients suspected of claiming …

Incident: Australian National Maritime Museum hit by alleged ‘trusted insider’ attack | iTNews

By Steven Kirby on Apr 04, 2023 Australian Insider Cyber Fraud, 06 March 2023 Australian National Maritime Museum hit by alleged ‘trusted insider’ attack Contractor allegedly accessed …

Incident: Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data misuse | ABC News (Australia)

By Steven Kirby on Apr 04, 2023 Australian Health Privacy Breach, 22 March 2023 Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data …