Category: Public Sector

Home » Sector » Public Sector

Incident: Defence Housing Australia investigates third-party provider hack exposure | iTnews

by Steven Kirby | Sep 7, 2023 | Australia, Australian InfoSec Incidents 2023, Building and Construction, Defence and Military, Federal Government, iTnews, Managed Services Provider | 0 |

Australian Defence Agencies Third-Party Breach, 07 September 2023. Defence Housing Australia and Department of Veterans’ Affairs investigates third-party provider hack exposure. The breached service provider was not identified.

Audit: NSW’s local government audit found that 47% of councils did not have a cyber security plan | kirbyidau.com

by Steven Kirby | Jul 13, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Compliance, Local Government, New South Wales | 0 |

Australian Audit Failure June 13 2023: NSW’s local government audit found that 47% of councils did not have a cyber security plan. IT policies and procedures were outdated or not in place at 43 councils.

Incident: Human error, not data breach, behind Port Arthur staff information appearing ‘live’ on library website | ABC News (Australia)

by Steven Kirby | Jun 20, 2023 | ABC News (Australia), Australia, Australian InfoSec Incidents 2023, Confidentiality, Data Handling, Privacy, State Government, Tasmania | 0 |

Australian Library Data Handling Incident, 20 June 2023: Human error, not data breach, behind Port Arthur staff information appearing ‘live’ on library website. Personal information exposed comprised dates of birth, resumes, addresses, school records and telephone numbers.

Incident: ACT government hit by cyber security breach | AAP

by Steven Kirby | Jun 8, 2023 | AAP, Australian Capital Territory, Australian InfoSec Incidents 2023, State Government | 0 |

Australian Cyber Incident, 08 June 2023: The Australian Cyber Security Centre is investigating a breach of the ACT government’s systems. Security breach was detected in the Barracuda email gateway system.

Audit: Australian Senate Estimates reveals 435 Chinese-made surveillance devices found at defence sites

by Steven Kirby | May 31, 2023 | A05.35 Independent review of information security, Australia, Australian Audit Report 2023, Availability, Confidentiality, Defence and Military, Federal Government, Integrity, Internal Audit, YouTube | 0 |

Defence Internal Audit Finding 31 May 2023: Australian Senate questioning reveals 435 Chinese-made surveillance devices found at defence sites. Defence initially claimed there was only one device.

Incident: Thousands of identifiable Northern Territory patient health files sent to overseas-based software vendor in government data breach | ABC News (Australia)

by Steven Kirby | May 25, 2023 | ABC News (Australia), Australian InfoSec Incidents 2023, Confidentiality, Data Handling, Medical and Health Care, Northern Territory, Privacy Breach, State Government | 0 |

Australian Medical Data Handling Incident 25 May 2023: Thousands of identifiable Northern Territory patient health files sent to overseas-based software vendor in government data breach. NT Health says the onus is on individuals to check if the privacy of their medical records has been breached.

Incident: Drug and alcohol tests of graduate paramedics revealed in Ambulance Victoria data breach | The Guardian

by Steven Kirby | May 12, 2023 | Australian InfoSec Incidents 2023, Confidentiality, Data Handling, Medical and Health Care, State Government, The Guardian, Victoria | 0 |

Australian Medical Data Handling Incident 04 May 2023. Drug and alcohol tests of graduate paramedics revealed in Ambulance Victoria data breach. The documents had become accessible to all employees on Ambulance Victoria’s internal intranet.

Incident: Woman charged with accessing private data on NSW gov computer | iTnews

by Steven Kirby | Apr 13, 2023 | Australian InfoSec Incidents 2023, Confidentiality, Government Agency, iTnews, New South Wales, Police and Law Enforcement, State Government | 0 |

Australian Unauthorised Access Incident, 13 April 2023: Woman charged with accessing private data on NSW gov computer. Personal data which was shared with others for the purpose of criminal activity (kidnapping).

Incident: Bug briefly exposed Service NSW data to other users | iTnews

by Steven Kirby | Apr 4, 2023 | Australian InfoSec Incidents 2023, Confidentiality, Government Agency, iTnews, New South Wales, State Government | 0 |

Australian State Government Cyber Incident, 04 April 2023: Bug briefly exposed Service NSW data to other users. ‘Technical issue’ may have exposed data of 3700 customers.

Incident: Data of thousands of TAFE SA students stolen in breach spanning over five years | ABC News (Australia)

by Steven Kirby | Apr 4, 2023 | ABC News (Australia), Australian InfoSec Incidents 2023, Confidentiality, Data Breach, Education and Training, South Australia, State Government | 0 |

Australian Education Data Breach, 4 April 2023. Data of thousands of TAFE SA students stolen in breach spanning over five years. SA Police “found” USB containing credentials such as driver’s licences and passports for enrolments prior to 2021 across all campuses.

Incident: Isaacs Regional Council Cyber Attack Highlights Risks Local Governments Face | australiancybersecuritymagazine

by Steven Kirby | Apr 4, 2023 | Australian InfoSec Incidents 2023, Availability, Confidentiality, In the Press, Integrity, Local Government, Queensland | 0 |

Australian Local Government Ransomware Attack, 04 April 2023: Isaacs Regional Council Ransomware Attack Highlights Risks Local Governments Face. It is unknown at this stage what information has been accessed.

Incident: Tasmanians affected by security breach of third-party file transfer service GoAnywhere | ABC News (Australia)

by Steven Kirby | Mar 31, 2023 | ABC News (Australia), Australian InfoSec Incidents 2023, Confidentiality, SaaS - Software as a Service, State Government, Tasmania, Third-Party Risk | 0 |

Updated Australian State Government Data Breach, 31 March 2023: Tasmanians affected by security breach of third-party file transfer service GoAnywhere. Tasmanian government has come under fire for providing a lack of detail.

Audit: Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports 324 control weaknesses

by Steven Kirby | Mar 29, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Availability, Compliance, Confidentiality, Integrity, Local Government, State Government, Western Australia | 0 |

West Australian Councils Audit Report 29 March 2023: Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports 324 control weaknesses. Cyber security concerns as council’s network rack found in staff toilet.

Audit: Western Australia Auditor General’s State Government Information Systems Audit 2021-22

by Steven Kirby | Mar 22, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Availability, Compliance, Confidentiality, Integrity, State Government, Western Australia | 0 |

West Australian State Government Audit Report March 2023: Auditor General’s State Government Information Systems Audit 2021-22 566 control weaknesses 34 significant. Cases: malicious insiders no MFA, outage from an unauthorised device, former employee accessing finance system one month after termination.

Incident: Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data misuse | ABC News (Australia)

by Steven Kirby | Mar 22, 2023 | ABC News (Australia), Australian Capital Territory, Australian InfoSec Incidents 2023, Confidentiality, Insider Threat, Medical and Health Care, Privacy Breach, State Government | 0 |

Australian Health Privacy Breach, 22 March 2023: Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data misuse. Private records of some Canberra Health Services patients ‘deliberately’ sent to industrial partner.

Audit: Queensland Audit Office’s State Entities 2022 reports deficiencies in information systems

by Steven Kirby | Mar 16, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Availability, Compliance, Confidentiality, Integrity, Queensland, State Government | 0 |

Queensland Audit Report 16 March 2023: Queensland Audit Office’s State Entities 2022 reports deficiencies in information systems. Only 33 per cent of departments have an effective system managing information security risks.

Incident: Australian National Maritime Museum hit by alleged ‘trusted insider’ attack | iTNews

by Steven Kirby | Mar 6, 2023 | Australian InfoSec Incidents 2023, Confidentiality, Cyber Fraud, Federal Government, Insider Threat, Integrity, iTnews, New South Wales, State Government | 0 |

Australian Insider Cyber Fraud, 06 March 2023: Australian National Maritime Museum hit by alleged ‘trusted insider’ attack. Contractor allegedly accessed accounting system, changing bank account details stored to his own.

Audit: Victoria audit warns of weak IT controls in council systems | iTnews

by Steven Kirby | Feb 27, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Availability, Compliance, Confidentiality, Integrity, iTnews, Local Government, State Government, Victoria | 0 |

Victorian Local Government Audit Report 27 February 2023: Victoria audit reports a significant rise in IT control weaknesses in council systems. Calls for Essential Eight adoption.

Incident: Fire Rescue Victoria investigating security incident | iTnews

by Steven Kirby | Dec 16, 2022 | Australian InfoSec Incidents 2022, Availability, iTnews, State Government, Victoria | 0 |

UPDATE Australian Cyber Incident December 2022: Fire Rescue Victoria confirms cyber attack from ‘external third party’ as outage continues. Outage could last “three or four days.”

Incident: Victoria Police allegedly use LEAP database to pursue, stalk, harass women prompting calls for inquiry | ABC News Australia

by Steven Kirby | Dec 15, 2022 | ABC News (Australia), Australian InfoSec Incidents 2022, Confidentiality, Insider Threat, Police and Law Enforcement, Privacy Breach, State Government, Unauthorised Access, Victoria | 0 |

Australian Privacy Incident December 2022: Victoria Police allegedly use LEAP database to pursue, stalk, and harass women prompting calls for an inquiry. In the past five years, there have been complaints against 178 police for misusing LEAP.

Home » Sector » Public Sector

More Australian News

Commentary on Australia's National Cyber Security Strategy
by Craig Nielsen, vice president Asia Pacific, GitLab on September 28, 2023
GUEST OPINION: Australia’s new Cyber Security Strategy to begin building six cyber shields around the nation comes at a time when it’s more important …
Gov stalls on some privacy reforms with conditional support
by Richard Chirgwin on September 28, 2023
The government has offered "in-principle" - conditional - support for over half of the recommendations from a two-year-long review of the Privacy …
Personal data to get greater protection, but targeted ads will keep coming
by Paul Sakkal on September 27, 2023
Australians are likely to gain new rights allowing them to demand tech companies erase data, sue for privacy invasions and avoid being targeted by …
Cyber risk: Directors’ duties and implications for M&A
by Luke Dawson on September 26, 2023
On 18 September 2023, ASIC Chair Joe Longo addressed the Australian Financial Review Cyber Summit on the topic of cyber preparedness. His message was …
APVMA added to HWL Ebsworth breach list
by Richard Chirgwin on September 25, 2023
The Australian Pesticides and Veterinary Medicines Authority (APVMA) has confirmed that it was one of the federal government agencies impacted by the …
Australian Federal Police claw back $45m lost to BEC scammers
by Ry Crozier on September 25, 2023
The Australian Federal Police has claimed some success in thwarting in-progress business email compromise (BEC) scams, in cases where the incident is …
AFP saves mum and dad business from cyber criminals | Australian Federal Police
by Australian Federal Police on September 25, 2023
The AFP has returned $45 million to Australian businesses targeted by cyber criminals in the past three years. As the AFP today challenges the …
Aussies Warned Over Cyber-Security Risks After Large-Scale Hack
by The Project on September 24, 2023
Sixty-five government departments and agencies have been caught up in the country’s latest ‘large scale’ cyber-attack on legal firm HWL Ebsworth, with stark ...
Federal government rolls out plan to protect Aussies from cyber attacks | 9 News Australia
by 9 News Australia on September 24, 2023
One year on since the Optus cyber attack, Home Affairs Minister has revealed part of the Federal government’s plan to protect Australians from future breache...
Troy Hunt scours the dark web for your stolen data — but he's just trying to help
by By Julian Fell on September 22, 2023
He's just "a dude on the web", but Troy Hunt has ended up playing an oddly central role in global cybersecurity. In April, the US Federal Bureau of …

Weekly Australian News and Monthly Incident Review Emails

No advertisements, marketing, sales, or unsolicited emails. Your email address is ONLY used to send the publications listed above.

Featured

Incident: Dymocks warns customers of data breach after account information leaked on dark web | ABC News (Australia)

Featured

Incident: Defence Housing Australia investigates third-party provider hack exposure | iTnews

Featured

Audit: NSW's local government audit found that 47% of councils did not have a cyber security plan | kirbyidau.com

Featured

Audit: Australian Senate Estimates reveals 435 Chinese-made surveillance devices found at defence sites

Featured

Quote: Meera Srinivasan "Home is where the Heart is ..."

Featured

Quote: Chinese Proverb "When planning for a year, plant corn. When planning..."

Category: Public Sector

More Australian News

Weekly Australian News and Monthly Incident Review Emails