Category: Public Sector

Home » Sector » Public Sector

Incident: Vic councils’ after-hours call answering service breached – iTnews

by Steven Kirby | Apr 22, 2024 | Australia, Australian InfoSec Incidents 2024, Confidentiality, iTnews, Local Government, Managed Services Provider, Ransomware | 0 |

Australian Councils Ransomware Attack, 22 April 2024: Victorian councils’ OracleCMS after-hours call answering service breached. Provider, OracleCMS hacked by Lockbit with around 50 clients’ data compromised.

Incident: Cyber attack on Victoria’s court system may have exposed recordings of sensitive cases | ABC News Australia

by Steven Kirby | Jan 2, 2024 | ABC News (Australia), Australian InfoSec Incidents 2024, Law & Legal, State Government, Victoria | 0 |

Australian Court Ransomware Attack, 02 January 2024: Cyber attack on Victoria’s court system may have exposed recordings of sensitive cases. The Qilin ransomware attacked the court system’s audio-visual archive, which staff discovered on December 21

Incident: UPDATE NDIA data breach claimed to impact 11,000 “records” | iTnews

by Steven Kirby | Nov 29, 2023 | Australia, Australian InfoSec Incidents 2023, Confidentiality, Data Breach, Federal Government, Insider Threat, iTnews, Privacy Breach | 0 |

Australian Insider Threat, 29 November 2023: National Disability Insurance Agency NDIA data breach claimed to impact 11,000 “records”. NDIA staffer charged with leaking participants’ data, acting NDIA provider also arrested.

Incident: Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks | SBS News

by Steven Kirby | Oct 6, 2023 | Australia, Australian InfoSec Incidents 2023, Denial of Service, Federal Government, SBS News | 0 |

Australian Denial of Service Attack, 06 October 2023: Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks. DDoS attack, impacted site access for about five hours.

Incident: Defence Housing Australia investigates third-party provider hack exposure | iTnews

by Steven Kirby | Sep 7, 2023 | Australia, Australian InfoSec Incidents 2023, Building and Construction, Defence and Military, Federal Government, iTnews, Managed Services Provider | 0 |

Australian Defence Agencies Third-Party Breach, 07 September 2023. Defence Housing Australia and Department of Veterans’ Affairs investigates third-party provider hack exposure. The breached service provider was not identified.

Audit: NSW’s local government audit found that 47% of councils did not have a cyber security plan | kirbyidau.com

by Steven Kirby | Jul 13, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Compliance, Local Government, New South Wales | 0 |

Australian Audit Failure June 13 2023: NSW’s local government audit found that 47% of councils did not have a cyber security plan. IT policies and procedures were outdated or not in place at 43 councils.

Incident: Parks Victoria data breach | 7News

by Steven Kirby | Jul 5, 2023 | Australian InfoSec Incidents 2023, Availability, In the Press, State Government, Travel and Accommodation, Victoria | 0 |

Australian Privacy Breach, 05 July 2023: There’s been a privacy breach on the state government’s new campsite booking system. Personal details of other campers shown to other campers

Incident: Human error, not data breach, behind Port Arthur staff information appearing ‘live’ on library website | ABC News (Australia)

by Steven Kirby | Jun 20, 2023 | ABC News (Australia), Australia, Australian InfoSec Incidents 2023, Confidentiality, Data Handling, Privacy, State Government, Tasmania | 0 |

Australian Library Data Handling Incident, 20 June 2023: Human error, not data breach, behind Port Arthur staff information appearing ‘live’ on library website. Personal information exposed comprised dates of birth, resumes, addresses, school records and telephone numbers.

Incident: ACT government hit by cyber security breach | AAP

by Steven Kirby | Jun 8, 2023 | AAP, Australian Capital Territory, Australian InfoSec Incidents 2023, State Government | 0 |

Australian Cyber Incident, 08 June 2023: The Australian Cyber Security Centre is investigating a breach of the ACT government’s systems. Security breach was detected in the Barracuda email gateway system.

Audit: Australian Senate Estimates reveals 435 Chinese-made surveillance devices found at defence sites

by Steven Kirby | May 31, 2023 | A05.35 Independent review of information security, Australia, Australian Audit Report 2023, Availability, Confidentiality, Defence and Military, Federal Government, Integrity, Internal Audit, YouTube | 0 |

Defence Internal Audit Finding 31 May 2023: Australian Senate questioning reveals 435 Chinese-made surveillance devices found at defence sites. Defence initially claimed there was only one device.

Incident: Thousands of identifiable Northern Territory patient health files sent to overseas-based software vendor in government data breach | ABC News (Australia)

by Steven Kirby | May 25, 2023 | ABC News (Australia), Australian InfoSec Incidents 2023, Confidentiality, Data Handling, Medical and Health Care, Northern Territory, Privacy Breach, State Government | 0 |

Australian Medical Data Handling Incident 25 May 2023: Thousands of identifiable Northern Territory patient health files sent to overseas-based software vendor in government data breach. NT Health says the onus is on individuals to check if the privacy of their medical records has been breached.

Incident: Drug and alcohol tests of graduate paramedics revealed in Ambulance Victoria data breach | The Guardian

by Steven Kirby | May 12, 2023 | Australian InfoSec Incidents 2023, Confidentiality, Data Handling, Medical and Health Care, State Government, The Guardian, Victoria | 0 |

Australian Medical Data Handling Incident 04 May 2023. Drug and alcohol tests of graduate paramedics revealed in Ambulance Victoria data breach. The documents had become accessible to all employees on Ambulance Victoria’s internal intranet.

Incident: Woman charged with accessing private data on NSW gov computer | iTnews

by Steven Kirby | Apr 13, 2023 | Australian InfoSec Incidents 2023, Confidentiality, Government Agency, iTnews, New South Wales, Police and Law Enforcement, State Government | 0 |

Australian Unauthorised Access Incident, 13 April 2023: Woman charged with accessing private data on NSW gov computer. Personal data which was shared with others for the purpose of criminal activity (kidnapping).

Incident: Bug briefly exposed Service NSW data to other users | iTnews

by Steven Kirby | Apr 4, 2023 | Australian InfoSec Incidents 2023, Confidentiality, Government Agency, iTnews, New South Wales, State Government | 0 |

Australian State Government Cyber Incident, 04 April 2023: Bug briefly exposed Service NSW data to other users. ‘Technical issue’ may have exposed data of 3700 customers.

Incident: Data of thousands of TAFE SA students stolen in breach spanning over five years | ABC News (Australia)

by Steven Kirby | Apr 4, 2023 | ABC News (Australia), Australian InfoSec Incidents 2023, Confidentiality, Data Breach, Education and Training, South Australia, State Government | 0 |

Australian Education Data Breach, 4 April 2023. Data of thousands of TAFE SA students stolen in breach spanning over five years. SA Police “found” USB containing credentials such as driver’s licences and passports for enrolments prior to 2021 across all campuses.

Incident: Isaacs Regional Council Cyber Attack Highlights Risks Local Governments Face | australiancybersecuritymagazine

by Steven Kirby | Apr 4, 2023 | Australian InfoSec Incidents 2023, Availability, Confidentiality, In the Press, Integrity, Local Government, Queensland | 0 |

Australian Local Government Ransomware Attack, 04 April 2023: Isaacs Regional Council Ransomware Attack Highlights Risks Local Governments Face. It is unknown at this stage what information has been accessed.

Incident: Tasmanians affected by security breach of third-party file transfer service GoAnywhere | ABC News (Australia)

by Steven Kirby | Mar 31, 2023 | ABC News (Australia), Australian InfoSec Incidents 2023, Confidentiality, SaaS - Software as a Service, State Government, Tasmania, Third-Party Risk | 0 |

Updated Australian State Government Data Breach, 31 March 2023: Tasmanians affected by security breach of third-party file transfer service GoAnywhere. Tasmanian government has come under fire for providing a lack of detail.

Audit: Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports 324 control weaknesses

by Steven Kirby | Mar 29, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Availability, Compliance, Confidentiality, Integrity, Local Government, State Government, Western Australia | 0 |

West Australian Councils Audit Report 29 March 2023: Western Australia Auditor General’s Local Government Information Security Audit 2021-22 reports 324 control weaknesses. Cyber security concerns as council’s network rack found in staff toilet.

Audit: Western Australia Auditor General’s State Government Information Systems Audit 2021-22

by Steven Kirby | Mar 22, 2023 | A05.35 Independent review of information security, Australian Audit Report 2023, Availability, Compliance, Confidentiality, Integrity, State Government, Western Australia | 0 |

West Australian State Government Audit Report March 2023: Auditor General’s State Government Information Systems Audit 2021-22 566 control weaknesses 34 significant. Cases: malicious insiders no MFA, outage from an unauthorised device, former employee accessing finance system one month after termination.

Incident: Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data misuse | ABC News (Australia)

by Steven Kirby | Mar 22, 2023 | ABC News (Australia), Australian Capital Territory, Australian InfoSec Incidents 2023, Confidentiality, Insider Threat, Medical and Health Care, Privacy Breach, State Government | 0 |

Australian Health Privacy Breach, 22 March 2023: Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data misuse. Private records of some Canberra Health Services patients ‘deliberately’ sent to industrial partner.

Home » Sector » Public Sector

More Australian News

Qantas fixes data breach after passengers' personal details shared
by By Jack McKay on May 1, 2024
Qantas says it has resolved an issue with its app that allowed customers to view the details of other passengers, including names and upcoming flight …
Finalists announced for Australian Cyber Security Awards 2024
by Malavika Santhebennur on May 1, 2024
Now in its second year, the Australian Cyber Security Awards 2024 is being held with support from principal partner Palo Alto Networks. The awards …
Teamwork pays off as scam losses fall to $2.74 billion
by Eleanor Dickinson on April 30, 2024
Losses to scams have dipped by 13 percent to $2.74 billion despite an upsurge in reports during 2023. The Australian Competition and Consumer …
Australian telcos face new outage disclosure and Triple Zero rules
by Ry Crozier on April 30, 2024
Australia’s telcos face a raft of new rules in the wake of the Optus outage, around how they communicate with customers during an incident and …
La Trobe University seeks new CISO
by Eleanor Dickinson on April 29, 2024
La Trobe University is on the hunt for a new CISO following the recent departure of Andrew Morgan. La Trobe University. La Trobe previously hired …
AustralianSuper hunts for new CISO
by Jeremy Nadel on April 29, 2024
AustralianSuper is on the hunt for a new chief information security officer to replace Mick Dunne who will leave for an external role after five …
Authorities say their action on scams is working. Devastated victims say it's nowhere near enough
by By the Specialist Reporting Team's Evan Young and Leonie Thorne, with national consumer affairs reporter Michael Atkin on April 29, 2024
Jenny Ng and Jian Lim often received text messages from their bank, HSBC, so it didn't ring any alarm bells when a message about fraudulent activity …
Australians lost $2.7 billion to scams in 2023, ACCC report reveals
by By the Specialist Reporting Team's Evan Young and Leonie Thorne on April 28, 2024
Australians reported a record number of scams last year, with losses totalling $2.7 billion, a new report from the consumer watchdog has …
Yearly Breach Reports Summary 2023
by Steven Kirby on April 27, 2024
This is a listing of all publicly disclosed Australian cyber attacks and data breaches from 2023. I do not claim that this is a complete list, as …
Cyber attack knocks out Wollongong trucking firm for second week
by Connor Pearce on April 27, 2024
Staff and contractors will wait another week to return to work.

Weekly Australian News and Monthly Incident Review Emails

No advertisements, marketing, sales, or unsolicited emails. Your email address is ONLY used to send the publications listed above.

Featured

Incident: Vic councils' after-hours call answering service breached - iTnews

Featured

Incident: 300GB allegedly stolen from Australian immigration consultancy - cyberdaily.au

Featured

Audit: NSW's local government audit found that 47% of councils did not have a cyber security plan | kirbyidau.com

Featured

Audit: Australian Senate Estimates reveals 435 Chinese-made surveillance devices found at defence sites

Featured

Quote: Alex Webling "If we wish to have any hope of beating the bad guys at the cyber game...."

Featured

Quote: Denis Waitley "Expect the best, plan for the worst, and prepare...."

Category: Public Sector

More Australian News

Weekly Australian News and Monthly Incident Review Emails