2018 Data Breaches in Australia
Commonwealth Bank – December 2018
Commonwealth Bank customers’ medical data exposed in potential privacy breach – The Commonwealth Bank is urgently investigating a potential data breach that may have given its staff access to customers’ sensitive medical information.
Humble Bundle – December 2018
News Corp – December 2018
Marriott’s Hotels – December 2018
Massive data breach at Marriott’s hotels exposes private data of 500,000 guests – A massive data breach has exposed the private data, including passport and credit card numbers, of half a million guests of the international hotel chain.
Credit card info and passport details of 500 million Marriott guests stolen in mammoth data breach
Dell – November 2018
Dell resets dell.com passwords after finding likely data breach – Computer manufacturer Dell has reset all passwords for accounts on its dell.com site, after it became aware on 9 November that an attempt to exfiltrate data was taking place.
Victoria’s Emergency Services – November 2018
‘Appalling’ emergency services data breach to be investigated – The state government will launch an immediate investigation into an “appalling” data breach that saw personal details of emergency services staff posted to the web.
Amazon – November 2018
Amazon suffers data breach, but says little about it –Amazon delivered a nasty surprise on one of its busiest days of the year today after discovering it had “inadvertently” leaked customers’ personal information.
Amazon suffers customer data breach hours before Black Friday
Amazon Is Offering Gift Cards To Customers Who Complain About Its Data Breach
PageUp People – November 2018 Update
Federal Group Hotel – November 2018
Contact databases hit by ‘low risk’ data breach – A Tasmanian luxury hotel and casino group has told some guests their personal information may have been accessed by a third party after a “low risk” data breach saw contact databases affected.
Data breach hits luxury hotels in Tasmania, with guest details at risk of theft by ‘third party’.
Under Armour’s MyFitnessPal App – November 2018
Austal – October 2018
Extortionists target Aussie defence shipbuilder after cyber security breach
Australia’s biggest defence exporter has been targeted by extortionists who launched a successful cyber attack to breach the company’s data management systems.
Facebook – September 2018
Security breach affects 50 million users – company logs off 90 million accounts as a precaution.
Facebook says it will message users affected following the theft of data from 29 million accounts to tell them what type of information has been accessed.
Perth Mint – September 2018
Perth Mint revises data breach impact – thousands of customers now affected.
RCR Tomlinson Engineering – August 2018
Strathmore Secondary College – August 2018
Probe into Melb high school privacy breach – The education department is investigating a privacy breach resulting in the accidental publication of Melbourne high school students’ personal records.
Airport Security Identity Cards (ASICs) – July 2018
MY Health Record – July 2018
Privacy Commissioner poised to release delayed data breach report but My Health Record adopts a different definition
Townsville City Council [Typeform] – July 2018
Online system used by Townsville City Council hacked exposing public’s personal details. HACKERS may have obtained the personal details who entered an art competition run by Townsville City Council. The council confirmed it had been notified about a security breach on Typeform, a company it uses.
Timehop App – July 2018
Social media memories app Timehop got hit by a data breach affecting 21 million users.
Cairns council hit by data breach [Typeform] | July 2018
PEXA – National e-conveyancing platform – July 2018
PEXA account compromise sees family lose home sale funds – Security team scanning logs for same pattern.
Australian National University – July 2018
ANU network ‘significantly compromised’ by hackers – University has spent ‘months’ containing threat
Airtasker – July 2018
Airtasker caught up in Typeform data breach – Jobs marketplace Airtasker has revealed a “small amount” of data it collected through web forms may have been compromised in the Typeform breach
Bakers Delight – July 2018
Bakers Delight warns comp entrants after Typeform breach – latest Australian company to notify customers of potential exposure to the Typeform data breach.
Tasmanian Electoral Commission – July 2018
Ticketmaster – June 2018
HealthEngine – June 2018
Flightradar24 – June 2018
Flightradar24 suffers security breach – Attackers hit single server – Popular flight tracking site Flightradar24 has suffered a security breach that “may” have compromised the email addresses and hashed passwords
PageUp People – June 2018
PageUp People all but confirms personal data ‘accessed’ – Widely-used Australian cloud HR vendor
MyHeritage – June 2018
MyHeritage breach leaks 92 million users’ details – A security breach at family networking and genealogy website leaked email addresses and hashed passwords of users
Family Planning NSW – May 2018
Family Planning NSW hit by ransomware attack – may have compromised online databases.
Svitzer Australia – March 2018
First data breach publicised under Australian notice scheme – Svizter reveals email leak
GoGet – January 2018
GoGet reveals data breach as police arrest alleged hacker – Car Sharing Service – Customer data accessed