Category: Australia

Incident: Australian Bunnings Customers Appear To Be Caught Up in FlexBooker Breach | Crikey

by Steven Kirby | Jan 10, 2022 | 9 Access Control, Australia, Australian InfoSec Incidents 2022, Confidentiality, Crikey, Data Breach, Retail | 0 |

Australian Privacy Breach January 2022: Bunnings private customer data exposed in data breach. Names, phone numbers and email addresses have been exposed via a third-party website FlexBooker.

Incident: Charges over Victoria Police data breach | 7News

by Steven Kirby | Dec 21, 2021 | 12.4 Logging and monitoring, 7 NEWS Australia, 7.1.2 Terms and conditions of employment, 7.2.2 Information security awareness, Australian InfoSec Incidents 2021, Insider Threat, Law & Legal, Policing and Law Enforcement, State Government, Victoria | 0 |

Australian Insider Threat December 2021: Charges over Victoria Police data breach. Accessing police information, disclosing police information, and intentionally communicating protected information.

Incident: Coles, Westpac, AMP and Department of Defence caught up in ‘significant’ data breach of Finite Recruitment | ABC News (Australia)

by Steven Kirby | Dec 18, 2021 | 12.6 Technical vulnerability management, ABC News (Australia), Australia, Australian InfoSec Incidents 2021, Confidentiality, Human Resources, Privacy Breach, SaaS - Software as a Service, Services | 0 |

Australian Recruitment Ransomware Incident December 2021: Coles, Westpac, AMP and Department of Defence caught up in ‘significant’ data breach of Finite Recruitment. Conti claims to have stolen more than 300 gigabytes of data in this attack.

Incident: Tens of thousands locked out of ATO Online accounts after payroll hack | iTnews

by Steven Kirby | Dec 17, 2021 | 12.2 Protection from Malware, Australia, Australian InfoSec Incidents 2021, Availability, Federal Government, iTnews, Ransomware, SaaS - Software as a Service | 0 |

Australian Government Payroll Outage December 2021: Tens of thousands locked out of ATO Online accounts after payroll hack. Linked to ransomware attack on major payroll software provider Frontier Software last month.

Incident: NSW government casual recruiter suffers ransomware hit | ZDNet

by Steven Kirby | Dec 17, 2021 | 12.6 Technical vulnerability management, Australian InfoSec Incidents 2021, Availability, Confidentiality, New South Wales, Privacy Breach, SaaS - Software as a Service, Services, State Government, ZDNet | 0 |

Australian Ransomware Incident December 2021: NSW government casual recruiter Finite Recruitment suffers Conti ransomware hit. Attackers claimed to have stolen more than 300GB of financial and personal data.

Incident: Cyber criminals force shutdown of NSW budgeting system | Australian Financial Review (AFR)

by Steven Kirby | Dec 16, 2021 | 12.6 Technical vulnerability management, Australian Financial Review (AFR), Australian InfoSec Incidents 2021, Availability, New South Wales, SaaS - Software as a Service, Services, State Government | 0 |

Australian Cyber Security Incident December 2021: Cyber criminals force shutdown of New South Wales’ Prime/Oracle based budgeting system. The problem is part of a worldwide vulnerability identified in Log4j.

Incident: Personal details of up to 80,000 SA government employees accessed in cyber attack | ABC News (Australia)

by Steven Kirby | Dec 10, 2021 | 12.2 Protection from Malware, ABC News (Australia), Australian InfoSec Incidents 2021, Confidentiality, Integrity, Privacy Breach, SaaS - Software as a Service, Services, South Australia, State Government, Utilities | 0 |

Australian State Government Ransomware Attack December 2021: Up to 80000 South Australian Government employee data stolen in Frontier Software ransomware attack. Data accessed include names, dates of birth, tax file numbers, addresses, bank account details and pay details (remuneration, tax withheld, superannuation contributions).

Incident: NSW iVote fails during local council elections | ZDNet

by Steven Kirby | Dec 6, 2021 | 12.1.3 Capacity management, 17 Information security aspects of business continuity management, Australian InfoSec Incidents 2021, Availability, New South Wales, State Government, ZDNet | 0 |

Australian Voting Outage December 2021: New South Wales’ iVote online voting system failed on Saturday during the state’s local government elections. Update: NSWEC finds iVote system failure may have impacted three local election outcomes.

Incident: Queensland’s CS Energy has its corporate systems infected by ransomware | iTnews

by Steven Kirby | Nov 30, 2021 | 12.2 Protection from Malware, Australia, Australian InfoSec Incidents 2021, Availability, Integrity, iTnews, Queensland, Utilities | 0 |

Australian Energy Provider Ransomware Attack November 2021. Queensland’s CS Energy has its corporate systems infected by ransomware. The incident has not impacted electricity generation.

Audit: WA councils fail to detect simulated cyber attack in audit | iTnews

by Steven Kirby | Nov 25, 2021 | 18.2.1 Independent review of information security, Australian Audit Report 2021, Availability, Compliance, Confidentiality, Integrity, Local Government, Western Australia | 0 |

West Australia Council Audit Report November 2021. WA councils fail to detect simulated cyber attack in audit. Only three out of 15 entities did so in a “timely manner”.

Incident: Australia’s Copyright Agency investigates cyber incident | iTnews

by Steven Kirby | Nov 22, 2021 | Australia, Australian InfoSec Incidents 2021, Confidentiality, Federal Government, Government Agency, iTnews | 0 |

Australian Copyright Agency Cyber Incident November 2021: Agency investigates cyber incident and notifies 37,000-plus member.

Audit: Queensland Audit Office (QAO) Water 2021 Report finds one breach and significant control weaknesses | ABC News (Australia)

by Steven Kirby | Nov 11, 2021 | ABC News (Australia), Australia, Australian Audit Report 2021, Availability, Compliance, Confidentiality, Integrity, Queensland, State Government, Utilities | 0 |

Australian Utility Audit Report November 2021: Queensland Audit Office (QAO) Water 2021 Report finds one breach and significant control weaknesses in the security of information systems. Sunwater has acknowledge it was the organisation reported breached in the report.

Incident: Queensland water supplier Sunwater targeted by hackers in months-long undetected cyber security breach | ABC News (Australia)

by Steven Kirby | Nov 11, 2021 | 12.6 Technical vulnerability management, ABC News (Australia), Australian InfoSec Incidents 2021, Critical Infrastructure, Hacked, Integrity, Queensland, State Government, Utilities | 0 |

Australian Water Utility Hacked November 2021: Queensland water supplier Sunwater targeted by hackers in months-long undetected cyber security breach. A Queensland Audit Office report found “threat actors” had targeted an older, more vulnerable version of the system.

Incident: SA Ambulance Service patients’ personal information stolen from consultancy firm | ABC News (Australia)

by Steven Kirby | Nov 10, 2021 | 8.3 Media Handling, ABC News (Australia), Australian InfoSec Incidents 2021, Confidentiality, Medical and Health Care, Privacy Breach, South Australia, State Government | 0 |

Australian Health Services Privacy Breach November 2021: South Australia Ambulance Service patients’ personal information stolen from consultancy firm. The personal details of 28,000 patients have been lost on a stolen a storage device.

Audit: None of NSW’s lead cluster agencies have implemented all Essential Eight controls | ZDNet

by Steven Kirby | Nov 1, 2021 | 18.2.1 Independent review of information security, ASD Essential Eight, Australian Audit Report 2021, Compliance, New South Wales, State Government, ZDNet | 0 |

Australian Audit Failure November 2021: None of New South Wales lead cluster agencies have implemented all Essential Eight controls – Premier and Cabinet, Communities and Justice, Customer Service, Education, Planning, Regional NSW, Health, Treasury, and Transport.

Incident: NSW Education department hit by cyber attack | iTnews

by Steven Kirby | Jul 8, 2021 | Australian InfoSec Incidents 2021, Availability, Education and Training, iTnews, New South Wales, State Government | 0 |

Australian Education Cyber Attack July 2021: NSW Education department hit by cyber attack just days before school term resumes. The attack had forced it to deactivate “a number of internal systems as a precaution.

Incident: Uniting Communities investigating possible data breach amid ‘cyber incident’ | ABC News (Australia)

by Steven Kirby | Jun 16, 2021 | ABC News (Australia), Australian InfoSec Incidents 2021, Availability, Medical and Health Care, South Australia | 0 |

Australian Healthcare Cyber Incident June 2021 – Uniting Communities investigating possible data breach amid ‘cyber incident’, access to some of its technology systems had been blocked.

Incident: Kununurra Department of Education worker charged with illegally accessing confidential information | The West Australian

by Steven Kirby | Jun 11, 2021 | Australian InfoSec Incidents 2021, Confidentiality, Education and Training, Insider Threat, Privacy Breach, The West Australian, Unauthorised Access, Western Australia | 0 |

Australian Unauthorised Access Incident June 2021: Western Australia – Kimberley – Kununurra Department of Education worker charged with illegally accessing confidential information. Charged after his office was raided by WA police last month

Audit: Fed govt cyber resilience unchanged since last year: auditor | iTnews

by Steven Kirby | Jun 10, 2021 | Australia, Australian Audit Report 2021, Availability, Compliance, Confidentiality, Federal Government, Integrity, iTnews | 0 |

Australian Audit Fail June 2021: Australian National Audit Office (ANAO) finds cyber resilience unchanged since last year. Only one of 18 agency audited hits Essential Eight baseline.

Incident: NSW Health confirms data breached due to Accellion vulnerability | ZDNet

by Steven Kirby | Jun 6, 2021 | Australian InfoSec Incidents 2021, Confidentiality, Medical and Health Care, New South Wales, Privacy Breach, Website Compromise, ZDNet | 0 |

Australian Vulnerability Incident June 2021: NSW Health is the latest Australian government entity to confirm being impacted by a vulnerability in the Accellion file transfer system. Different types of information, including identity information and in some cases, health-related personal information, were included in the attack.

Home » Location » Australia

More Australian News

NSW shelves iVote system until 'extensive reconfiguration' can occur
January 19, 2022
NSW’s iVote online voting system will be shelved until further notice after a technical glitch prevented voters from casting votes at local …
South Australian gov issues breach notice to hacked payroll provider
January 18, 2022
Payroll software provider Frontier Systems has been issued with a breach of contract notice over a ransomware attack that saw the personal details of …
ABC to go ahead with compulsory iview logins despite privacy concerns
January 17, 2022
The ABC will introduce compulsory logins for its iview service in a staged manner this year, despite the fact that there have been privacy warnings …
Australia 'more exposed' to cyber attacks due to AUKUS
January 16, 2022
The Institute of Public Affairs' Evan Mulholland says he believes Australia is more exposed to cyber-attacks due to the AUKUS alliance. This comes as Home Affairs Minister Karen Andrews has commented on the nation's security, saying she believes Australia is more vulnerable to such attacks because of the partnership. "We […]
Little oversight over Notifiable Data Breach scheme
January 16, 2022
EXCLUSIVE: Australian organisations have reported over 3,000 data breaches since the Notifiable Data Breaches (NDB) scheme began in early 2018, but …
Cyber criminals stopped from stealing tens of millions of dollars as AFP unleashes new cyber punch
January 16, 2022
The AFP has stopped cyber criminals from stealing $24 million from the superannuation accounts of hard-working Australians and launched several …
Australia faces down another global bug
January 16, 2022
The COVID-19 virus is affecting every aspect of our lives, and now a second bug is on the loose.Hospitals and businesses with people working on the …
TfNSW finds more customers, employees impacted by Accellion breach
January 14, 2022
Transport for NSW has found a greater number of customers and employees had their data compromised in the Accellion data breach last year than …
Gov holds off extending encryption powers to anti-corruption bodies
January 11, 2022
The federal government appears to have abandoned its plan to extend controversial encryption-busting powers to federal, state and territory …
Incident: Australian Bunnings Customers Appear To Be Caught Up in FlexBooker Breach | Crikey
January 10, 2022
Australian Privacy Breach, 10 January 2022 Bunnings private customer data exposed in data breach Names, phone numbers and email addresses have been …

Receive Weekly Australian News and Monthly Incident Review Emails

No advertisements, marketing, sales, or unsolicited emails. Your email address is ONLY used to send the publications listed above.

Author

Steven Kirby
699 Posts

Featured

Incident: Australian Bunnings Customers Appear To Be Caught Up in FlexBooker Breach | Crikey

Featured

Incident: Charges over Victoria Police data breach | 7News

Featured

Audit: WA councils fail to detect simulated cyber attack in audit | iTnews

Featured

Audit: Queensland Audit Office (QAO) Water 2021 Report finds one breach and significant control weaknesses | ABC News (Australia)

Featured

Quote: J. M. Barrie "All of this has happened before, and it will all happen again."

Featured

Quote: Michael McCormack "Never been a breach, the ABS assures us that this won’t happen into the future with this Census"

Category: Australia

More Australian News

Receive Weekly Australian News and Monthly Incident Review Emails

Australian YouTube News

Author

Steven Kirby