Australian Retail DDoS Attack, 13 December 2024: New South Wales: Bondi Markets was allegedly taken down in a DDoS attack, making the organisation the latest victim of a wider RipperSec threat group DDoS campaign against Australian companies.
Read More
Australian Retail Ransomware Attack, 15 November 2024: The Sarcoma ransomware gang has claimed Australian office furniture supplier Micon Office National as a victim on its darknet leak site. Potentially 34 gigabytes of data exfiltrated from the company and is threatening to publish the data within 11 days.
Read More
Australian Retail Email Error, 23 April 2024: Personal data of ‘thousands’ of Hungry Jack’s staff exposed in internal leak. An email to 198 staff from the training and communication portal, included an attached spreadsheet of staff information.
Read More
Australian Retailer Ransomware Breach, 15 January 2024: Qilin ransomware gang has shared 37.6 gigabytes of data belonging to Victorian print music company Hal Leonard Australia. Hal Leonard given a week to pay an undisclosed sum of money for ransom.
Read More
Australian Travel Agency Breach, 11 January 2024: Melbourne travel agency Inspiring Vacations, exposes customer data after leaving database publicly accessible. The leaked data, includes passport images, travel visa certificates, travel itineraries, and partial credit card numbers.
Read More
Australian Retail Breach, 09 January 2024: Australian retailer The Iconic, promises refunds after a spate of fraudulent transactions on customer accounts. While not directly hacked, the unauthorised third party used a technique known as ‘credential stuffing’.
Read More
Australian Retail Privacy Breach, 08 September 2023: Dymocks warns customers of data breach after account information leaked on dark web. Customers’ addresses, email addresses, phone numbers, and membership details may have been compromised.
Read More
Australian Fastfood Company Hacked, 06 September 2023: Pizza Hut Australia leaks one million customers’ details, claims ShinyHunters hacking groups. Unauthorised access gained to companies Amazon Web Services buckets claiming to have exfiltrated 30 million customer order records.
Read More
Australian Retail Third-Party Breach, 15 March 2023: Coles confirms its customers impacted by Latitude Financial data breach. Coles says it has not been informed of how many of its customers have been impacted, the data dates back as far as 2005.
Read More
Australian Retail Data Breach February 2023: The Good Guys customers possibly affected by data breach at former third-party provider My Rewards. Up to 1.5 million loyalty program customers hacked which is believed to have occurred in August 202
Read More
Australian Cyber Attack February 2023: Black and White Cabs booking service offline after cyber attack. Passengers and drivers have been left waiting as the booking system remains locked days after the breach.
Read More
Australian Retail Data Breach Incident October 2022: Wine dealer Vinomofo data breach: 500,000 customers at risk after wine dealer hit by cyber-attack. At risk of exposure are the names, dates of birth, addresses, email addresses, phone numbers and genders of customers.
Read More
Australian Retail Cyber Incident July 2022: New security alert issued to all Woolworths Everyday Rewards members. Fraudsters have likely obtained members’ login credentials and account details from online scams or other sources.
Read More
Australian Retailer Data Breach May 2022: Australian company Amart Furniture has 100k warranty customers details breached. Database hosted on AWS was the source of the information.
Read More
Australian Privacy Breach January 2022: Bunnings private customer data exposed in data breach. Names, phone numbers and email addresses have been exposed via a third-party website FlexBooker.
Read More
Australian Insider Threat September 2020. Specsavers – Adelaide optometrist struck off register after tampering with hundreds of glasses prescriptions. Investigations revealed somebody had “systematically” altered the prescriptions using the optometrist’s login details.
Read More
Australian Ransomware Data Breach September 2020: Australian company Jands appears to have been hit by Windows ransomware. NetWalker encrypted and stole financial data, customer details and other miscellaneous data.
Read More
Australian Offboarding Fail August 2020: Sydney Tools sues competitor Total Tools over alleged email hacking. Confirmed it is suing competitor Total Tools over an alleged email hacking.
Read More
Australian Ransomware Attack May 2020: Sydney sports speciality store chain IN SPORTS has been hit by the REvil ransomware that attacks Windows systems and a limited set of data from the company has been published on the dark web by the attackers.
Read More
Australian Cyber Attack February 2020: Australian wool sales stopped by ransomware attack, major wool exchange supplier hit by a ransomware attack that encrypted its production databases.
Read More
There's a warning tonight about a rise in fake digital IDs being sold to teenagers. Cyber safety experts say it's putting vulnerable Victorians at risk of having their identities stolen. [...]
The federal government has launched a pilot scheme that will allow Australians to compare the cyber security of smart devices before buying them. • … [...]
Key points ACMA has fined Telstra $277,000 for failing to use required identity authentication processes to prevent SIM swapping fraud. • The fraud … [...]
Modernised Definitions: Casting a Wider Net The Exposure Draft Bill would amend and clarify some of the foundational definitions in the Privacy Act … [...]
Shifting the emphasis from individuals upholding privacy standards to harmful and invasive business practices is the right move. But an existing … [...]
Threat detection and reporting Internal policies and procedures What policies or procedures must organisations have in place to protect data or … [...]
When Telstra engineers embarked on a simple server chassis replacement exercise in 2020, they could barely have contemplated the complex chain of … [...]
Ransomware actor claims hack of government department, but evidence suggests no malicious activity has occurred… But patient data from multiple … [...]
Key points The Northern Territory government plans to offer digital driver's licences built to internationally recognised standards by the end of the … [...]
Key points Draft legislation would give Australian organisations 72 hours to notify the Information Commissioner of an eligible data breach, replacing … [...]
You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even … [...]