Support 1300 669 220

Major Cyber Incidents in Australia and What We Can Learn from Them

Across Australia, cyber threats are becoming more frequent, more costly, and more damaging. From banks to universities to superannuation providers, organisations across every sector are facing growing pressure to protect sensitive data and critical systems. This roundup of major breaches offers some insight into what can be done better. Each breach has a valuable lesson in where defences failed and what measures could have made the difference.

1. 3P Corporation – May 2025

Sector: Financial Services
In one of the year’s largest breaches, over 200GB of internal documents and customer data were leaked by the Space Bears ransomware group. Despite initial denials, the leak confirmed a significant compromise.
Impact: Major breach of financial integrity and customer privacy.

2. REST & AustralianSuper – April 2025

Sector: Superannuation
A coordinated cyberattack targeted Australia’s largest superannuation funds, compromising both member data and financial records.
Impact: High risk of fraud and identity theft for thousands of pensioners.

3. The Fullerton Hotel Sydney – April 2025

Sector: Hospitality
A 148GB data breach exposed sensitive ID documents of high-profile guests, including passports and driver’s licences.
Impact: Brand damage, erosion of trust, and identity theft risk.

4. Vertel – June 2025

Sector: Managed Service Provider (MSP)
Vertel’s breach poses a cascading threat to all client networks. Hackers threatened to release data, which had already received over 1,300 views.
Impact: Client exposure and downstream liability.

5. Watkins Steel – May 2025

Sector: Manufacturing and Construction
The Akira ransomware group claimed responsibility for stealing 17GB of operational and intellectual property data.
Impact: Operational disruption and contract risk.

6. Australian Human Rights Commission – May 2025

Sector: Government
More than 600 confidential submissions were mistakenly disclosed, a case of internal error rather than hacking.
Impact: Breach of public trust and risk to vulnerable individuals.

7. Skeggs Goldstien – June 2025

Sector: Financial Services
The Qilin ransomware gang listed this NSW-based firm, which confirmed internal data had been compromised.
Impact: Exposure of financial records, loss of client confidence.

8. Western Sydney University – April 2025

Sector: Education
Data from 10,000 students was exposed after unauthorised system access. Forensic investigations are ongoing.
Impact: Identity theft risk and reputational damage.

9. Legal Practice Board of WA – May 2025

Sector: Legal and Regulatory
A Dire Wolf ransomware attack forced system shutdowns and disrupted public access to legal records.
Impact: Operational disruption and loss of public confidence.

10. Hertz – April 2025

Sector: Transport and Rental
A third-party vendor breach compromised customers’ personal information and driver’s licences.
Impact: Widespread data privacy breach and supply chain vulnerability.

What These Breaches Teach Us

Each of these incidents reinforces a critical truth: cybersecurity is no longer just an IT issue. It’s a business imperative.

While the attack vectors vary, from ransomware to human error to third-party compromise, most of these breaches could have been prevented with stronger controls, better visibility, and proactive security.

5 Measures That Could Have Prevented These Breaches

  1. Adopt a Zero Trust Security Model
      Assume no user or device is trustworthy by default. Require continuous verification.
  2. Enforce Patch Management and Regular Vulnerability Scans
      Eliminate known exploits before attackers can take advantage of them.
  3. Strengthen Third-Party Risk Management
      Evaluate and monitor your vendors’ cybersecurity posture. Don’t inherit their weaknesses.
  4. Implement Data Loss Prevention (DLP) Tools
      Restrict the movement of sensitive data, and flag abnormal behaviour before it’s too late.
  5. Prioritise Staff Cybersecurity Training
      Most attacks start with phishing. Train your team to spot suspicious links and requests.

Cyber threats are not going away. With the right mindset and layered protections, businesses can stay resilient.

These breaches serve as a sobering reminder: when security fails, the real cost is trust.