Yearly Breach Reports Summary 2023
This is a listing of all publicly disclosed Australian cyber-attacks and data breaches from 2023.
Read MoreCategory: Australian InfoSec Incidents 2023
Incident: Eagers Automotive says IT outage stems from cyber incident | iTnews
Australian Automotive Cyber Incident, 29 December 2023: Eagers Automotive says IT outage stems from cyber incident, enters trading halt. Impacting our IT systems in some operating locations across Australia and New Zealand.
Read More
Incident: Yakult Australia targeted in cyber attack, employee files published on dark web | ABC News Australia
Australian Manufacturer Ransomware Privacy Breach, 28 December 2023: Yakult Australia targeted in cyber attack, employee files published on dark web. 95 gigabytes of data including passports, medical assessments, salaries, and performance reviews.
Read More
Incident: Life Saving Victoria server hacked by ‘malicious actors’ | ABC News Australia
Australian Privacy Breach, 24 December 2023: Life Saving Victoria server hacked by ‘malicious actors’. The extent of the personal information is limited and does not pose a serious threat to the individuals.
Read More
Incident: St Vincent’s Health network hit by cyber attack, with data stolen | ABC News Australia
Australian Private Health Provider Hacked, 22 December 2023: St Vincent’s Health network hit by cyber attack, with “some” data stolen. The organisation is working to determine what information has been taken.
Read More
Incident: University of Wollongong discloses data breach | iTnews
Australian University Data Breach, 11 December 2023: University of Wollongong discloses data breach. The breach may have affected both staff and students.
Read More
Incident: Nissan discloses cyber incident in Australia and NZ | iTnews
Australian Financial Service Data Breach, 7 December 2023: Nissan Australian and New Zealand Nissan Corporation and Financial Services discloses cyber incident. Also affecting Nissan Financial Services, Mitsubishi Motors Financial Services, Renault Financial Services, Skyline Car Finance. RAM Truck Finance and LDV Financial Services.
Read More
Incident: UPDATE NDIA data breach claimed to impact 11,000 “records” | iTnews
Australian Insider Threat, 29 November 2023: National Disability Insurance Agency NDIA data breach claimed to impact 11,000 “records”. NDIA staffer charged with leaking participants’ data, acting NDIA provider also arrested.
Read More
Incident: Port Adelaide Football Club Hackers post Port files online
Australian Football Cyber Attack, 16 November 2023: Port Adelaide Football Club Hackers post Port files online. Member data is believed not to be compromised though members should be wary of communications from the club.
Read More
Incident: TissuPath data breach victim upset by delayed notification | ABC News (Australia)
Australian Pathology Ransomware Attack, 14 November 2023: Australian pathology company Tissupath, reported a ransomware attack at a third-party IT supplier, Core Desktop. About 130,000 victims of a data hack at pathology company TissuPath in August involving referrals issued between 2011 and 2020 was to blame.
Read More
Incident: Major Australian port operator shuts down amid cyber security incident, impacting goods in and out of the country | ABC News (Australia)
Australian Ports Cyber Attack, 11 November 2023: Major Australian port operator DP World Australia shuts down amid cyber security incident, impacting goods in and out of the country. Operator failed to fix a critical IT vulnerability; the patch had been released over a month earlier.
Read More
Incident: SA Health patients caught up in data breach of third-party platform Personify Care | ABC News (Australia)
Australian Patient Data, 28 October 2023: SA Health patients caught up in data breach of third-party platform Personify Care. Health information of 121 patients and the names and phone numbers of about 12,000 others was deleted by an “unauthorised third party.
Read More
Incident: The Super SA data hack impacted thousands but took two months to come to light. Here’s what we know | ABC News (Australia)
Australian Health Insurer Hacked, 28 October 2023: The Super SA data hack impacted thousands but took two months to come to light. Here’s what we know. 14,011 members may have been impacted by a cyber security incident involving a former third-party service provider.
Read More
Incident: Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks | SBS News
Australian Denial of Service Attack, 06 October 2023: Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks. DDoS attack, impacted site access for about five hours.
Read More
Incident: Cybercriminals access patient information at Melbourne’s Royal Women’s Hospital | 7News
Australian Patient Data Breach, 05 October 2023: Personal data of almost 200 patients exposed in hack of Melbourne hospital staff member’s email. Worker sent details about the patients to their personal email account, which was later hacked.
Read More
Incident: Ransomware gang posts 30GB of data it claims belongs to Victorian real estate group | cyberdaily.au
Australian Real Estate Ransomware Attack, 04 October 2023: Ransomware gang posts 30GB of data it claims belongs to Victorian real estate group. Ragnar Locker gang is claiming to have breached Network Pacific Real Estate following a failure in negotiations.
Read More
Incident: Russian ransomware gang AlphV breaches Core Desktop, a South Melbourne IT services company | ABC News (Australia)
Australian IT Services Ransomware Attack, 05 September 2023: Russian ransomware gang AlphV breaches Core Desktop, a South Melbourne IT services company. TissuPath, Strata Plan and Barry Plant Blackburn were all clients of Core Desktop.
Read More
Incident: Dymocks warns customers of data breach after account information leaked on dark web | ABC News (Australia)
Australian Retail Privacy Breach, 08 September 2023: Dymocks warns customers of data breach after account information leaked on dark web. Customers’ addresses, email addresses, phone numbers, and membership details may have been compromised.
Read More
Incident: Defence Housing Australia investigates third-party provider hack exposure | iTnews
Australian Defence Agencies Third-Party Breach, 07 September 2023. Defence Housing Australia and Department of Veterans’ Affairs investigates third-party provider hack exposure. The breached service provider was not identified.
Read More
Incident: Pizza Hut Australia leaks one million customers’ details, claims ShinyHunters hacking group | Bitdefender
Australian Fastfood Company Hacked, 06 September 2023: Pizza Hut Australia leaks one million customers’ details, claims ShinyHunters hacking groups. Unauthorised access gained to companies Amazon Web Services buckets claiming to have exfiltrated 30 million customer order records.
Read More
More Australian News
There's a warning tonight about a rise in fake digital IDs being sold to teenagers. Cyber safety experts say it's putting vulnerable Victorians at risk of having their identities stolen. [...]
The federal government has launched a pilot scheme that will allow Australians to compare the cyber security of smart devices before buying them. • … [...]
Key points ACMA has fined Telstra $277,000 for failing to use required identity authentication processes to prevent SIM swapping fraud. • The fraud … [...]
Modernised Definitions: Casting a Wider Net The Exposure Draft Bill would amend and clarify some of the foundational definitions in the Privacy Act … [...]
Shifting the emphasis from individuals upholding privacy standards to harmful and invasive business practices is the right move. But an existing … [...]
Threat detection and reporting Internal policies and procedures What policies or procedures must organisations have in place to protect data or … [...]
When Telstra engineers embarked on a simple server chassis replacement exercise in 2020, they could barely have contemplated the complex chain of … [...]
Ransomware actor claims hack of government department, but evidence suggests no malicious activity has occurred… But patient data from multiple … [...]
Key points The Northern Territory government plans to offer digital driver's licences built to internationally recognised standards by the end of the … [...]
Key points Draft legislation would give Australian organisations 72 hours to notify the Information Commissioner of an eligible data breach, replacing … [...]
You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even … [...]