The 2021 Data Breach Notifications in Australia

Lastpass – December 2021

LastPass Says It Didn’t Leak Your Password

Ubisoft – December 2021

Ubisoft says Just Dance was hit by a data breach
Ubisoft Says a ‘Misconfiguration’ Exposed Just Dance Player Data

Huawei – December 2021

Key details of Huawei security breach in Australia revealed

Victoria Police – December 2021

Charges over Victoria Police data breach

Finite Recruitment – December 2021

Coles, Westpac, AMP and Department of Defence caught up in ‘significant’ data breach of Finite Recruitment

A Russian Hacking Group Caused A Data Breach That Could Affect Coles, Westpac & Some Gov Depts

SA Government – December 2021

Government confirms almost 80,000 public sector employees affected in Frontier Software cyber attack

Cyber attack steals personal data of up to 80,000 SA public servants

Personal details of up to 80,000 SA government employees accessed in cyber attack
Premier can’t say if government trusts firm after data breach | The state government can’t confirm its trust in a third-party payroll provider, after personal data from up to 80,000 public servants – including bank account details – were stolen.
80,000 SA govt employees exposed to data breach | Third party payroll service hit by ransomware.
SA gov employee data stolen in Frontier Software ransomware attack | At least 38,000 staff impacted
Tens of thousands locked out of ATO Online accounts after payroll hack
South Australian gov issues breach notice to hacked payroll provider

Gravatar – December 2021

Gravatar profile add-on leaks data on millions of users | Details of just under 114 million users in hackers’ hands

Panasonic – November 2021

Panasonic says it has been hit by a data breach

Panasonic confirms data breach after hackers access internal network
Panasonic Confirms Six Months Of Data Breaches

ACT Government – November 2021

Canberra Liberals: Serious data breach needs independent investigation | United Firefighters’ Union
Refer compo spreadsheet data breach to privacy watchdog: ACT firies’ union
Independent investigation needed into workers’ compensation spreadsheet data breach: opposition
Liberals call for external review into data breach
ACT government publishes sensitive health data from nearly 30,000 workers’ compensation claims

Tabcorp – November 2021

Tabcorp says bad data, technical error behind online betting breach | Took in-play bets on a US college basketball game

Australia’s Copyright Agency – November 2021

Australia’s Copyright Agency | investigates cyber incident | Notifies 37,000-plus members

GoDaddy – November 2021

Global web hosting company GoDaddy reports data breach

GoDaddy security breach exposes WordPress users’ data GoDaddy security breach exposes WordPress users’ data | Up to 1.2 million customers caught up
GoDaddy breach exposes 1.2 million customer accounts
Cybersecurity experts weigh in on GoDaddy data breach

South Australian Ambulance Service – November 2021

Ambulance patient data stolen

Sunwater – November 2021

Queensland water supplier Sunwater targeted by hackers in months-long undetected cyber security breach

mySA Gov – November 2021

mySA Gov accounts breached

Hackers access mySA GOV digital licence accounts, prompting warning from state government

Twitch – October 2021

Live streaming platform Twitch hit by huge data breach

Amazon’s Twitch hit by data breach

Twitch hack reveals multi-million-dollar sums top streamers earn from playing computer games
Amazon’s Twitch blames configuration error for data breach
Twitch hit by huge data breach
Twitch in crisis as it blames server error for massive data breach
Massive data breach at Twitch.tv

AI Dungeon – September 2021

If You Played AI Dungeon Back in April Your Data Was Probably Compromised

Accenture – August 2021

Ransomware group demanding US$50M in Accenture security breach: cyber firm

Accenture admits cyber incident also involved data breach

FIFA21 – August 2021

Hackers ditch FIFA 21 secrets online after failed extortion attempt

Optus – 2019 Update

Two years later: Optus data breach probed
OAIC launches investigation into Optus data breach

SafeWA – August 2021

Senior health officials raised concerns about SafeWA data breach long before election

Melbourne City Mission and the Department of Health and Human Services – 2017 Update

Victorian Ombudsman launches investigation into handling of child protection data breach

Uber – 2016 Update

Uber slapped on wrist for massive data breach

Uber found to have breached privacy of 1.2 million Aussies in 2016
Uber interfered with privacy of 1.2 million Australians

NSW Department of Education – July 2021

NSW Education Dept downed by cyber attack
NSW Education had unknown vulnerability in breached system

Notifying individuals affected by July’s cyber incident

Department of Education networks

Tasmanian State Growth – July 2021

Employee allegedly passed drivers’ information to debt collector

LimeVPN – July 2021

LimeVPN Suffers Major Data Breach, Over 69K Users at Risk

Morningstar – June 2021

Morningstar data breach reveals KPMG deal maker lists

LinkedIn – June 2021

LinkedIn denies data breach with 700 million records

LinkedIn data from 700 million users for sale on hacking forum
LinkedIn hacked again — personal info of 756 million users leaked

Carnival Cruises – June 2021

Cruise operator Carnival discloses personal data breach

Uniting Communities – June 2021

Uniting Communities investigating possible data breach amid ‘cyber incident’

Ray White – June 2021

Former Ray White real estate agent Ant Manton investigated for alleged data theft

NSW Health – June 2021

Medical information leaked in NSW Health hack

NSW Health admits personal data accessed in Accellion breach

Air India – May 2021

SITA hack may have been worse than thought following Air India breach
Air India breach compromised data for 4.5 million passengers
Air India says data on 4.5 million passengers stolen

TPG – May 2021

TPG confirms data on dark web belongs to its customer

NAB 2019 – April 2021

NAB fired IT worker over data breach

NAB repays customers $687k for data breach

UnitingCare Queensland – April 2021

UnitingCare Queensland hit by cyber attack

Swinburne University – April 2021

Details of over 5,000 people exposed in Swinburne uni breach

Swinburne University data breach exposes details of 5000 staff, students

Ubiquiti – April 2021

IoT firm Ubiquiti hit by ‘catastrophic’ data breach | Intruders allegedly gained administrative access to Ubiquity’s servers
No customer info accessed’ in Ubiquiti breach

Shanghai Security Database – April 2021

Australians flagged in Shanghai security files which shed light on China’s surveillance state and monitoring of Uyghurs

Facebook – April 2021

Massive Facebook data breach leaks info on millions of users
Facebook data breach: how to check if your details were leaked
Facebook data breach exposes personal information of 533 million users, including its founder Mark Zuckerberg
Facebook data leak: Details of 533 million users found on site for hackers
What You Can Do About That Messy Facebook Data Breach
How to check if your Facebook account was one of the half billion that were breached

Eastern Health – March 2021

Victorian hospitals hit by cyber attack

WA Parliamentary Email Network – March 2021

China suspected of cyber attack on Western Australia’s Parliament during state election

Microsoft – March 2021

Australian corporations hit by massive Microsoft Server hack
ESET says at least 10 hacking groups using Microsoft software flaw

SITA – March 2021

SITA data breach affects millions of airline passengers

Minister’s Private Email Accounts – February 2021

‘Security risks’: Ministers’ private email accounts in historical data breach

Transport for NSW – February 2021

Transport for NSW data stolen in Accellion breach

SingTel – February 2021

Optus parent organization SingTel assesses potential Accellion data breach

Accellion – February 2021

The Accellion Data Breach Seems to Be Getting Bigger

Australian orgs exposed to Accellion vulnerability

NT Health – February 2021

NT Health Leaks Thousands of Emails in Data Breach

QIMR Berghofer Medical Research Institute – February 2021

Qld research institute suffers data breach

Service NSW – 2020 Update

20,000 people still unaware of Service NSW breach
Service NSW struggling to contact thousands of cyber attack victims

Oxfam – February 2021

Oxfam Australia investigates suspected data breach

ASIC – January 2021

ASIC joins Reserve Bank NZ as victim of Accellion hack
ASIC server hit by cyber security breach

Tasmanian Ambulance – January 2021

Cybersecurity expert calls for replacement technology following Tasmanian ambulance patient data leak
Tasmanian data leak reveals HIV status of ambulance patients
Mass hack incident exposes Tasmanian patient’s medical data on public website