Category: Australia
Incident: Dymocks warns customers of data breach after account information leaked on dark web | ABC News (Australia)
Australian Retail Privacy Breach, 08 September 2023: Dymocks warns customers of data breach after account information leaked on dark web. Customers’ addresses, email addresses, phone numbers, and membership details may have been compromised.
Read More
Incident: Defence Housing Australia investigates third-party provider hack exposure | iTnews
Australian Defence Agencies Third-Party Breach, 07 September 2023. Defence Housing Australia and Department of Veterans’ Affairs investigates third-party provider hack exposure. The breached service provider was not identified.
Read More
Incident: Pizza Hut Australia leaks one million customers’ details, claims ShinyHunters hacking group | Bitdefender
Australian Fastfood Company Hacked, 06 September 2023: Pizza Hut Australia leaks one million customers’ details, claims ShinyHunters hacking groups. Unauthorised access gained to companies Amazon Web Services buckets claiming to have exfiltrated 30 million customer order records.
Read More
Incident: University of Sydney caught up in third-party data breach | iTNews
Australian University Third-Party Data Breach, 1 September 2023: The University of Sydney has disclosed a data breach potentially affecting international students. The data breach involved a third-party provider, still undisclosed.
Read More
Incident: Thousands of donors to Australian charities, including Cancer Council and Canteen, have data leaked to dark web | ABC News (Australia)
Australian Telemarketer Breach, 23 August 2023: Pareto Phone, a Brisbane-based telemarketing company that contacts potential donors on behalf of charities, was hacked by cybercriminals in April. 70 charities, including Amnesty International Australia, Australian Conservation Foundation, Wilderness Society, Cancer Council Cancer, The Fred Hollows Foundation, Canteen, Heart Foundation, and Medecins Sans Frontieres.
Read More
Incident: Australian vocational and trades education centre hit by Lockbit | iTWire
Australian Education Ransomware Attack, 19 July 2023: Australian Academy of Vocational Education and Trades trading as Academia, has been hit by the Windows ransomware group Lockbit 3.0. The attackers have given the organisation a deadline of 24 July to get in touch and presumably negotiate a ransom payment.
Read More
Incident: Fortescue Metals admits it suffered breach, Cl0p claims credit | iTWire
Australian Mining Cyber Incident, 18 July 2023: Iron ore giant Fortescue Metals targeted by Russian ransomware group. Australian mining company confirms hack occurred on 28 May but data disclosed ‘was not confidential in nature’.
Read More
Audit: NSW’s local government audit found that 47% of councils did not have a cyber security plan | kirbyidau.com
Australian Audit Failure June 13 2023: NSW’s local government audit found that 47% of councils did not have a cyber security plan. IT policies and procedures were outdated or not in place at 43 councils.
Read More
Incident: Ventia takes systems offline to contain cyber attack | iTnews
Australian Critical Infrastructure Attack, 11 July 2023: Australian critical infrastructure company Ventia has been breached in an online attack. Ventia specialises in long-term operation, maintenance, and management of critical public and private assets and infrastructure.
Read More
Incident: Australian horse riding organisations caught up in cyber attack impacting 10,000 people | The Courier Mail
Australian Event Management Incident, 06 July 2023: Australian critical infrastructure company Ventia has been breached in an online attack. Information including names, email addresses, home addresses, phone numbers and bank details.
Read More
Incident: Perpetual says some personal info compromised in attack on supplier | iTnews
Australian Wealth Management Incident 28 June 2023: Wealth and asset management firm Perpetual Limited says some personal info compromised in attack on supplier. First names, surnames and addresses and bank account details maybe compromised.
Read More
Incident: NSW cashless gambling trial to focus on data security after hack of smaller pilot program | The Guardian
Australian Gambling Ransomware Attack, 24 June 2023: Wests Newcastle shuts down cashless gambling trail after digital payment processing firm Banktech experienced a ransomware attack.
Read More
Incident: Human error, not data breach, behind Port Arthur staff information appearing ‘live’ on library website | ABC News (Australia)
Australian Library Data Handling Incident, 20 June 2023: Human error, not data breach, behind Port Arthur staff information appearing ‘live’ on library website. Personal information exposed comprised dates of birth, resumes, addresses, school records and telephone numbers.
Read More
Incident: AU and NZ – SmartPay investigating breach after ransomware attack | iTnews
Australian Eftpos Ransomware Attack, 19 June 2023: Australian and New Zealand listed company SmartPay investigating breach after ransomware attack. The Eftpos hardware provider says criminals stole customer data.
Read More
Incident: FIIG Securities isolates client-facing systems after attack | iTnews
Australian Finance Broker Privacy Breach, 12 June 2023: Australian brokerage firm FIIG Securities isolates client-facing systems after attack. “Identification details and documents” purportedly accessed.
Read More
Incident: ACT government hit by cyber security breach | AAP
Australian Cyber Incident, 08 June 2023: The Australian Cyber Security Centre is investigating a breach of the ACT government’s systems. Security breach was detected in the Barracuda email gateway system.
Read More
Incident: Toyota does U-turn, confirms thousands of Australian customers hit by latest data breach | drive.com.au
Australian Automotive Incident 01 June 2023: Toyota does U-turn, confirms thousands of Australian customers hit by latest data breach. Access key was publicly available on GitHub for almost five year.
Read More
Audit: Australian Senate Estimates reveals 435 Chinese-made surveillance devices found at defence sites
Defence Internal Audit Finding 31 May 2023: Australian Senate questioning reveals 435 Chinese-made surveillance devices found at defence sites. Defence initially claimed there was only one device.
Read More
Incident: Thousands of identifiable Northern Territory patient health files sent to overseas-based software vendor in government data breach | ABC News (Australia)
Australian Medical Data Handling Incident 25 May 2023: Thousands of identifiable Northern Territory patient health files sent to overseas-based software vendor in government data breach. NT Health says the onus is on individuals to check if the privacy of their medical records has been breached.
Read More
Incident: Drug and alcohol tests of graduate paramedics revealed in Ambulance Victoria data breach | The Guardian
Australian Medical Data Handling Incident 04 May 2023. Drug and alcohol tests of graduate paramedics revealed in Ambulance Victoria data breach. The documents had become accessible to all employees on Ambulance Victoria’s internal intranet.
Read More