Australian Ports Cyber Attack, 11 November 2023: Major Australian port operator DP World Australia shuts down amid cyber security incident, impacting goods in and out of the country. Operator failed to fix a critical IT vulnerability; the patch had been released over a month earlier.
Read More
Australian Media Ransomware Attack February 2022. Sky News employees caught in cyber breach, Info accessed included full names, dwelling and e mail addresses, phone numbers, dates of beginning, tax file numbers, salaries, payroll IDs and superannuation fund particulars.
Read More
Australian Government Privacy Breach February 2022: NSW Government QR Code data leak exposes over 500,000 sensitive locations. Address’s included Defence sites, bombing ranges and domestic violence shelters.
Read More
Australian Cryptocurrency Hack February 2022: Young Australian Rich Listers watch wealth plummet after hack, crypto sell-off. While the Illuvium team secured the breach quickly and have begun repaying affected user.
Read More
Australian Privacy Breach January 2022: Bunnings private customer data exposed in data breach. Names, phone numbers and email addresses have been exposed via a third-party website FlexBooker.
Read More
Australian Insider Threat December 2021: Charges over Victoria Police data breach. Accessing police information, disclosing police information, and intentionally communicating protected information.
Read More
Australian Recruitment Ransomware Incident December 2021: Coles, Westpac, AMP and Department of Defence caught up in ‘significant’ data breach of Finite Recruitment. Conti claims to have stolen more than 300 gigabytes of data in this attack.
Read More
Australian Ransomware Incident December 2021: NSW government casual recruiter Finite Recruitment suffers Conti ransomware hit. Attackers claimed to have stolen more than 300GB of financial and personal data.
Read More
Australian Cyber Security Incident December 2021: Cyber criminals force shutdown of New South Wales’ Prime/Oracle based budgeting system. The problem is part of a worldwide vulnerability identified in Log4j.
Read More
Australian Voting Outage December 2021: New South Wales’ iVote online voting system failed on Saturday during the state’s local government elections. Update: NSWEC finds iVote system failure may have impacted three local election outcomes.
Read More
Australian Water Utility Hacked November 2021: Queensland water supplier Sunwater targeted by hackers in months-long undetected cyber security breach. A Queensland Audit Office report found “threat actors” had targeted an older, more vulnerable version of the system.
Read More
Australian Health Services Privacy Breach November 2021: South Australia Ambulance Service patients’ personal information stolen from consultancy firm. The personal details of 28,000 patients have been lost on a stolen a storage device.
Read More
Australia Data Insider Access Incident May 2021: A Service NSW worker could face criminal charges involving accessing a restricted database. ICAC said, the agency had “misplaced confidence” in the effectiveness of its controls.
Read More
Australia Software Company Cyberattack April 2021: Enterprises need to change passwords following Australian privilege access management company ClickStudios, Passwordstate attack. Advises “please reset all the stored passwords, VPNs/Firewall/Switches, local accounts or any server passwords”
Read More
Australian Privacy Breach March 2021: Ex-worker who was investigated over child sex offences accessed sensitive data 260 times including after leaving the job. Child welfare advocates say unauthorised data access puts children at risk.
Read More
Australian Insider Privacy Breach March 2021: Australian Fair Work Commission upholds dismissal of ANZ banker who accessed private info about a colleague and celebrity. ANZ did not accept the employee’s explanation and terminated her employment immediately.
Read More
Australian Detailed Privacy Breach September 2020: Scouts Victoria data breach potentially nets 900 people’s personal details including bank details, birth certificates and court orders.
Read More
Australian Privacy Exposure September 2020: Misconfigured UTAS SharePoint site exposed 20,000 students’ details. Security settings allowed broad access to files.
Read More
Australian Insider Unauthorised Access September 2020: Government contractor accessed private data over ‘grudge’
using access to job seeker records to illegally access the Commonwealth data of four people.
Australian Government Privacy Breach September 2020: Data breach exposes tens of thousands of NSW driver’s licences online. The documents feature scans of licences which reveal information such as names and addresses.
Read More
There's a warning tonight about a rise in fake digital IDs being sold to teenagers. Cyber safety experts say it's putting vulnerable Victorians at risk of having their identities stolen. [...]
The federal government has launched a pilot scheme that will allow Australians to compare the cyber security of smart devices before buying them. • … [...]
Key points ACMA has fined Telstra $277,000 for failing to use required identity authentication processes to prevent SIM swapping fraud. • The fraud … [...]
Modernised Definitions: Casting a Wider Net The Exposure Draft Bill would amend and clarify some of the foundational definitions in the Privacy Act … [...]
Shifting the emphasis from individuals upholding privacy standards to harmful and invasive business practices is the right move. But an existing … [...]
Threat detection and reporting Internal policies and procedures What policies or procedures must organisations have in place to protect data or … [...]
When Telstra engineers embarked on a simple server chassis replacement exercise in 2020, they could barely have contemplated the complex chain of … [...]
Ransomware actor claims hack of government department, but evidence suggests no malicious activity has occurred… But patient data from multiple … [...]
Key points The Northern Territory government plans to offer digital driver's licences built to internationally recognised standards by the end of the … [...]
Key points Draft legislation would give Australian organisations 72 hours to notify the Information Commissioner of an eligible data breach, replacing … [...]
You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even … [...]