Yearly Breach Reports Summary 2023
This is a listing of all publicly disclosed Australian cyber-attacks and data breaches from 2023.
Read MoreCategory: Australian InfoSec Incidents 2023
Incident: Eagers Automotive says IT outage stems from cyber incident | iTnews
Australian Automotive Cyber Incident, 29 December 2023: Eagers Automotive says IT outage stems from cyber incident, enters trading halt. Impacting our IT systems in some operating locations across Australia and New Zealand.
Read More
Incident: Yakult Australia targeted in cyber attack, employee files published on dark web | ABC News Australia
Australian Manufacturer Ransomware Privacy Breach, 28 December 2023: Yakult Australia targeted in cyber attack, employee files published on dark web. 95 gigabytes of data including passports, medical assessments, salaries, and performance reviews.
Read More
Incident: Life Saving Victoria server hacked by ‘malicious actors’ | ABC News Australia
Australian Privacy Breach, 24 December 2023: Life Saving Victoria server hacked by ‘malicious actors’. The extent of the personal information is limited and does not pose a serious threat to the individuals.
Read More
Incident: St Vincent’s Health network hit by cyber attack, with data stolen | ABC News Australia
Australian Private Health Provider Hacked, 22 December 2023: St Vincent’s Health network hit by cyber attack, with “some” data stolen. The organisation is working to determine what information has been taken.
Read More
Incident: University of Wollongong discloses data breach | iTnews
Australian University Data Breach, 11 December 2023: University of Wollongong discloses data breach. The breach may have affected both staff and students.
Read More
Incident: Nissan discloses cyber incident in Australia and NZ | iTnews
Australian Financial Service Data Breach, 7 December 2023: Nissan Australian and New Zealand Nissan Corporation and Financial Services discloses cyber incident. Also affecting Nissan Financial Services, Mitsubishi Motors Financial Services, Renault Financial Services, Skyline Car Finance. RAM Truck Finance and LDV Financial Services.
Read More
Incident: UPDATE NDIA data breach claimed to impact 11,000 “records” | iTnews
Australian Insider Threat, 29 November 2023: National Disability Insurance Agency NDIA data breach claimed to impact 11,000 “records”. NDIA staffer charged with leaking participants’ data, acting NDIA provider also arrested.
Read More
Incident: Port Adelaide Football Club Hackers post Port files online
Australian Football Cyber Attack, 16 November 2023: Port Adelaide Football Club Hackers post Port files online. Member data is believed not to be compromised though members should be wary of communications from the club.
Read More
Incident: TissuPath data breach victim upset by delayed notification | ABC News (Australia)
Australian Pathology Ransomware Attack, 14 November 2023: Australian pathology company Tissupath, reported a ransomware attack at a third-party IT supplier, Core Desktop. About 130,000 victims of a data hack at pathology company TissuPath in August involving referrals issued between 2011 and 2020 was to blame.
Read More
Incident: Major Australian port operator shuts down amid cyber security incident, impacting goods in and out of the country | ABC News (Australia)
Australian Ports Cyber Attack, 11 November 2023: Major Australian port operator DP World Australia shuts down amid cyber security incident, impacting goods in and out of the country. Operator failed to fix a critical IT vulnerability; the patch had been released over a month earlier.
Read More
Incident: SA Health patients caught up in data breach of third-party platform Personify Care | ABC News (Australia)
Australian Patient Data, 28 October 2023: SA Health patients caught up in data breach of third-party platform Personify Care. Health information of 121 patients and the names and phone numbers of about 12,000 others was deleted by an “unauthorised third party.
Read More
Incident: The Super SA data hack impacted thousands but took two months to come to light. Here’s what we know | ABC News (Australia)
Australian Health Insurer Hacked, 28 October 2023: The Super SA data hack impacted thousands but took two months to come to light. Here’s what we know. 14,011 members may have been impacted by a cyber security incident involving a former third-party service provider.
Read More
Incident: Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks | SBS News
Australian Denial of Service Attack, 06 October 2023: Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks. DDoS attack, impacted site access for about five hours.
Read More
Incident: Cybercriminals access patient information at Melbourne’s Royal Women’s Hospital | 7News
Australian Patient Data Breach, 05 October 2023: Personal data of almost 200 patients exposed in hack of Melbourne hospital staff member’s email. Worker sent details about the patients to their personal email account, which was later hacked.
Read More
Incident: Ransomware gang posts 30GB of data it claims belongs to Victorian real estate group | cyberdaily.au
Australian Real Estate Ransomware Attack, 04 October 2023: Ransomware gang posts 30GB of data it claims belongs to Victorian real estate group. Ragnar Locker gang is claiming to have breached Network Pacific Real Estate following a failure in negotiations.
Read More
Incident: Russian ransomware gang AlphV breaches Core Desktop, a South Melbourne IT services company | ABC News (Australia)
Australian IT Services Ransomware Attack, 05 September 2023: Russian ransomware gang AlphV breaches Core Desktop, a South Melbourne IT services company. TissuPath, Strata Plan and Barry Plant Blackburn were all clients of Core Desktop.
Read More
Incident: Dymocks warns customers of data breach after account information leaked on dark web | ABC News (Australia)
Australian Retail Privacy Breach, 08 September 2023: Dymocks warns customers of data breach after account information leaked on dark web. Customers’ addresses, email addresses, phone numbers, and membership details may have been compromised.
Read More
Incident: Defence Housing Australia investigates third-party provider hack exposure | iTnews
Australian Defence Agencies Third-Party Breach, 07 September 2023. Defence Housing Australia and Department of Veterans’ Affairs investigates third-party provider hack exposure. The breached service provider was not identified.
Read More
Incident: Pizza Hut Australia leaks one million customers’ details, claims ShinyHunters hacking group | Bitdefender
Australian Fastfood Company Hacked, 06 September 2023: Pizza Hut Australia leaks one million customers’ details, claims ShinyHunters hacking groups. Unauthorised access gained to companies Amazon Web Services buckets claiming to have exfiltrated 30 million customer order records.
Read More
More Australian News
Australia is a highly active class action forum, leaving businesses exposed to costly and burdensome litigation. [...]
Watch: Cyber resilience and the energy transition Ross Phillipson explores the cyber security risks and opportunities arising from the energy … [...]
The n0n ransomware group says it has tens of thousands of patient records as healthcare provider Hunter Neurology investigates a possible third-party … [...]
An Aussie accounting firm is listed as a hacking victim; OAIC and the Australian Taxation Office have been informed of the incident. Daniel Croft and … [...]
The ASD’s new Essentials framework is a step in the right direction, says the Australian Information Security Association. • Fri, 16 Oct 2026 • … [...]
Qilin ransomware group claims breach of Chadwick Switchboards; allegedly stolen data published on the dark web. • Fri, 16 Oct 2026 • … [...]
A former government software engineer claims Canberra's mismanagement of our data is scandalous. Samuel Spencer tells 7NEWS that sensitive budget information is being stored on outdated software, leaving it vulnerable [...]
From banks battling big tech for AI talent to ransomware attacks exposing sensitive medical records, David Hollingworth and Daniel Croft unpack another eventful week in cyber security – including why [...]
Key points ASD is replacing the Essential Eight with ASD Essentials, a principles-based framework, though it will likely take a year or two to become … [...]
Key points ASIC's CISO Jamie Norton and senior executive leader for data, analytics and AI Graham Jefferson have both resigned, with Norton staying … [...]
Key points Citizen Lab's Exposing Adfection report says Israeli firm Discover-Tech used online ads to track devices and help plant spyware, reaching … [...]
The Australian government looks likely to introduce stronger legal checks on artificial intelligence (AI) companies to parliament early next year, … [...]
Sensitive Australian court data was accessed in India more than a decade ago, newly surfaced emails have revealed, but the court took no action and … [...]
The Queensland government department delivering the state's first cyber security strategy lost more than $800,000 in a cyber attack, a new report has … [...]
The number of data breaches across Queensland's public sector is increasing, including some deemed malicious and intentional, the state's privacy … [...]
An Adelaide private hospital has notified individuals and cyber security authorities of a data breach of personal information. In a limited statement, … [...]
A class action has been launched against the federal government over allegations of "mass and routine sharing" of veterans' medical records over 20 … [...]
AUSTRAC has warned real estate agencies to stay vigilant as scammers impersonating the regulator have begun making their moves. Emilie Lauer • Tue, 13 … [...]
The consultation on proposed changes to AFCA’s Rules has now closed. These changes will enable AFCA to consider scam-related complaints under the … [...]
The Gentlemen claims hack of a Western Australian State Emergency Service unit; past and present members notified of the incident. • Wed, 14 Oct 2026 … [...]
Wherever there are refrigeration controls connected to the internet, there is risk, says Claroty’s Jason Pearce. • Wed, 14 Oct 2026 • … [...]
Australian Cyber Aware's September 2026 review highlights major cybersecurity, privacy, AI, fraud, governance, risk and compliance developments … [...]
Key points US authorities seized seven domains supporting Integrity Technology Group's MicroScan and FishHub hacking tools, as detailed in court … [...]
Consumers can now expect better connectivity during disasters after Telstra, Optus and TPG Telecom implemented temporary disaster roaming (TDR) … [...]