March 08, 2023
Our list of publicly disclosed cyberattacks in Australia for 2022. In particular, the attacks on telecommunications provider Optus in September and health insurer Medibank in October attracted a lot of attention, because personal data of a large number of Australians was affected.
Cyber incident overview
Diagram in high resolution (License: Creative Commons BY 4.0):
Which companies were affected by a cyber attack?
# | Date | City | State | Company | Type | Stichworte |
---|---|---|---|---|---|---|
1 | February 2022 | Clayton VIC | VIC | Practices | Victoria, Healthcare,Australian Clinical Labs Limited (ACL) / Medlab Pathology | |
2 | February 20, 2022 | Newcastle NSW | NSW | Cruises | New South Wales, Travel, Tourism,Boats, Martime, Ships,Scenic Group | |
3 | April 2022 | Sydney NSW | NSW | Transport authority | New South Wales, Transportation,Transport for NSW | |
4 | May 15, 2022 | Norwest NSW | NSW | IT application | New South Wales, Healthcare,Welfare, Social,CTARS | |
5 | May 19, 2022 | Fund company | Finance, Money,Spirit Super | |||
6 | June 8, 2022 | Media | Media Today | |||
7 | June 2022 | City of Boroondara VIC | VIC | College | Victoria,Xavier College | |
8 | 2022 | Bentleigh East VIC | VIC | Construction | Victoria, Construction,Langford Jones Homes | |
9 | July 2022 | Truganina VIC | VIC | Prison | Victoria, Administration, Authority, Government, Public sector,Port Phillip Prison | |
10 | July 10, 2022 | Melbourne VIC | VIC | University | Victoria, College, University, Research,Deakin University | |
11 | July 2022 | Perth WA | WA | University | Western Australia, College, University, Research,University of Western Australia | |
12 | August 21, 2022 | Ravenhall VIC | VIC | Vegetables | Victoria, Groceries, Food,Costa Group | |
13 | September 10, 2022 | Brisbane QLD | QLD | IT | Queensland,Dialog Information Technology | |
14 | September 2022 | Macquarie Park NSW | NSW | Telecommunication | New South Wales,Optus | |
15 | September 29, 2022 | Surry Hills NSW | NSW | Care products | New South Wales, Consumer goods,The Good Collective Pty Ltd / Flora & Fauna | |
16 | September 30, 2022 | Melbourne VIC | VIC | Energy supplier | Victoria,EnergyAustralia | |
17 | October 2022 | Melbourne VIC | VIC | Telecommunications | Victoria,Telstra | |
18 | October 2022 | Cairns QLD | QLD | Health service | Queensland, Healthcare,Apunipima Cape York Health Council | |
19 | October 12, 2022 | Melbourne VIC | VIC | Health insurance | Victoria, Finance, Money,Healthcare,Medibank | |
20 | October 2022 ? | Melbourne VIC | VIC | Online retailer | Victoria,MyDeal | |
21 | October 2022 ? | Ormond VIC | VIC | School | Victoria,Kilvington Grammar School | |
22 | October 2022 ? | Melbourne VIC | VIC | Online wine retailer | Victoria, Groceries, Food,Vinomofo | |
23 | October 24, 2022 | Eagle Farm QLD | QLD | Real estate | Queensland, Real estate,Harcourts | |
24 | October 2022 | Bundall QLD | QLD | Property Management | Queensland, Real estate,SSKB Group | |
25 | October 2022 | Defence Forces | Armed Forces, Military,Australian Defence Force / ForceNet | |||
26 | November 3, 2022 | IT | PNORS Technology Group | |||
27 | November 3, 2022 | Canberra ACT | ACT | Legal service | Australian Capital Territory, Administration, Authority, Government, Public sector,Justice, Legal,Legal Aid ACT | |
28 | November 2022 | Melbourne VIC | VIC | Engineering | Victoria,Aurecon | |
29 | November 2022 ? | Sydney NSW | NSW | Charity organization | New South Wales, Welfare, Social,The Smith Family | |
30 | November 2022 ? | Sydney NSW | NSW | Energy supplier | New South Wales,AGL | |
31 | December 2022 | Brisbane QLD | QLD | Hospitals | Queensland, Healthcare,Clinic, Hospital,Mater Health | |
32 | December 3, 2022 | Rockhampton QLD | QLD | Bank | Queensland, Finance, Money,The Capricornian | |
33 | December 2022 | Palm Beach NSW | NSW | Real estate agency | New South Wales, Real estate,LJ Hooker | |
34 | December 13, 2022 | Sydney NSW | NSW | Telecommunications provider | New South Wales,TPG Telecom / iiNet / Westnet | |
35 | December 15, 2022 | Melbourne VIC | VIC | Fire agency | Victoria, Administration, Authority, Government, Public sector,Emergency service, Rescue,Fire Rescue Victoria (FRV) | |
36 | December 22, 2022 | Brisbane QLD | QLD | University | Queensland, College, University, Research,Queensland University of Technology (QUT) |
Hacker attacks statistics
By month
Diagram in high resolution (License: Creative Commons BY 4.0):
By industry
Diagram in high resolution (License: Creative Commons BY 4.0):
Notes
- The statistics are based on the known incidents listed here.
- Since only some of the cases become known, the evaluations are not representative.
- Industries where incidents are immediately visible due to public access (e.g. healthcare) are more represented than others.
- An incident may be assigned to multiple countries or industries. Also, a country cannot always be assigned. So the totals shown on the charts may be different.
- The graphics may be reused according to the license Creative Commons Attribution 4.0 / CC BY 4.0 (attribution: KonBriefing Research).
More statistics:
Cyberattacks, Hacker attacks, Ransomware attacks
Cyberattacks, Hacker attacks, Ransomware attacks
Details, examples and sources

Unauthorized access to patient data at pathology practices in Australia
Australian Clinical Labs Limited (ACL) / Medlab Pathology - Clayton, Victoria, Australia
https://medlab.com.au/medlab-cyber-incid...

Cyber attack on a cruise operator
Scenic Group - Newcastle, New South Wales, Australia
https://www.travelweekly.com/River-Cruis...

Unauthorized access at a transport authority in Australia
Transport for NSW - Sydney, New South Wales, Australia
At the authority, there was already an unauthorized access in early 2021 due to a vulnerability in a file transfer software.
https://www.zdnet.com/article/transport-...

Unauthorized access to a cloud application for care services in Australia
CTARS - Norwest, New South Wales, Australia
https://ctars.com.au/ctars-data-breach

Unauthorized access to emails of an Australian fund company
Spirit Super - Australia
https://spiritsuper.com.au/privacy-breac...

Cyber attack on a Chinese media platform in Australia
Media Today - Australia
https://www.channelnews.com.au/chinese-a...

Data breach at a college in Australia
Xavier College - City of Boroondara, Victoria, Australia
https://www.theage.com.au/national/victo...

Cyber attack on a construction company in Australia, followed by insolvency
Langford Jones Homes - Bentleigh East, Victoria, Australia
https://www.news.com.au/finance/business...

Cyber attack on a maximum security prison in Australia
Port Phillip Prison - Truganina, Victoria, Australia
https://www.dailymail.co.uk/news/article...

Unauthorized access to personal data of a university in Australia
Deakin University - Melbourne, Victoria, Australia
https://blogs.deakin.edu.au/deakinlife/2...

Unauthorized access at a university in Australia
University of Western Australia - Perth, Western Australia, Australia
https://www.itnews.com.au/news/student-d...

Cyber attack on a vegetable growing company in Australia
Costa Group - Ravenhall, Victoria, Australia
https://costagroup.com.au/2022/10/06/sta...

Cyber attack on an IT company in Australia
Dialog Information Technology - Brisbane, Queensland, Australia
https://www.dialog.com.au/a/dialog-incid...

Cyber attack on an Australian telecommunications provider
Optus - Macquarie Park, New South Wales, Australia
https://www.optus.com.au/about/media-cen...

Malware on the website of a provider of care products in Australia
The Good Collective Pty Ltd / Flora & Fauna - Surry Hills, New South Wales, Australia
https://bwxltd.com/investor-centre/

Unauthorized access to customer data at an energy supplier in Australia
EnergyAustralia - Melbourne, Victoria, Australia
https://www.energyaustralia.com.au/about...

Another Australian telecommunications provider affected by data theft
Telstra - Melbourne, Victoria, Australia
Affected are approximately 30,000 employee records from a former employee rewards program that was operated by a third-party vendor.
https://exchange.telstra.com.au/telstra-...

Cyber attack on a health service in Australia
Apunipima Cape York Health Council - Cairns, Queensland, Australia
https://www.apunipima.org.au/apunipima-c...

Cyberattack on a health insurance company in Australia
Medibank - Melbourne, Victoria, Australia
https://www.medibank.com.au/livebetter/n...
https://www.medibank.com.au/health-insur...
⭐⭐⭐⭐ KonBriefing thinks: excellent immediate communication by the affected organization.
⭐⭐⭐⭐ KonBriefing thinks: excellent updated information on the incident by the affected organization.

Unauthorized access to customer data at an online retailer in Australia
MyDeal - Melbourne, Victoria, Australia
https://help.mydeal.com.au/hc/en-us/arti...

Cyber attack on a school in Australia
Kilvington Grammar School - Ormond, Victoria, Australia
https://www.abc.net.au/news/2022-11-28/c...

Date breach at an online wine retailer in Australia
Vinomofo - Melbourne, Victoria, Australia
https://www.smh.com.au/technology/online...

Unauthorized access at a real estate company in Australia
Harcourts - Eagle Farm, Queensland, Australia
https://www.news.com.au/technology/onlin...

Cyber attack on a property management company in Australia
SSKB Group - Bundall, Queensland, Australia
https://www.sskb.com.au/sskb-cyber-incid...

Australian Defence Force communications platform hit by cyberattack
Australian Defence Force / ForceNet - Australia
https://www.theguardian.com/technology/2...

Cyber attack on an IT company in Australia
PNORS Technology Group - Australia
https://www.theage.com.au/national/victo...

Cyberattack on a public legal service in Australia
Legal Aid ACT - Canberra, Australian Capital Territory, Australia
https://www.legalaidact.org.au/
⭐⭐⭐ KonBriefing thinks: very good immediate communication by the affected organization.

Cyber attack on an engineering company headquartered in Australia
Aurecon - Melbourne, Victoria, Australia
https://www.smh.com.au/business/companie...

Hacker attack on a charity organization in Australia
The Smith Family - Sydney, New South Wales, Australia
https://www.thesmithfamily.com.au/campai...
The affected organization informed the public about the incident.

Unauthorized access a number of customer accounts at an Australian energy supplier
AGL - Sydney, New South Wales, Australia
https://www.agl.com.au/help-support/cont...
⭐⭐⭐ KonBriefing thinks: very good updated information on the incident by the affected organization.

Cyber attack on a chain of hospitals in Australia
Mater Health - Brisbane, Queensland, Australia
https://www.cybersecurityconnect.com.au/...

Online fraud with debit cards of a bank in Australia
The Capricornian - Rockhampton, Queensland, Australia
https://www.capricornian.com.au/general/...

Data theft at a real estate agency in Australia
LJ Hooker - Palm Beach, New South Wales, Australia
https://www.dailymail.co.uk/news/article...

Unauthorized access to e-mail accounts at an Australian telecommunications provider
TPG Telecom / iiNet / Westnet - Sydney, New South Wales, Australia
https://wcsecure.weblink.com.au/pdf/TPG/...
https://help.iinet.net.au/information-un...
The affected organization informed the public about the incident.

Cyberattack on a fire agency in Australia
Fire Rescue Victoria (FRV) - Melbourne, Victoria, Australia
https://www.news.com.au/national/victori...
https://www.frv.vic.gov.au/update-frv-ou...
The affected organization informed the public about the incident.

Cyber attack on a university in Australia
Queensland University of Technology (QUT) - Brisbane, Queensland, Australia
https://www.abc.net.au/news/2022-12-22/q...
Overviews
How many companies and organizations were affected by cyberattacks?
KonBriefing Research had counted 36 successful cyberattacks on Australian companies and organizations for the period.
When did cyber attacks take place?
For 2022, KonBriefing Research counted the following successful cyberattacks on companies and organizations in Australia: February (2) • April (1) • May (2) • June (3) • July (3) • August (1) • September (4) • October (9) • November (5) • December (6)
Which industries were affected by cyberattacks?
For the year 2022, KonBriefing Research found successful cyberattacks on companies and organizations of the following industries: Healthcare (5) • Telecommunication (3) • Real estate (3) • Public sector (3) • Finance (3) • Universities (3) • IT (3) • Social welfare (2) • Education (2) • Energy industry (2) • Online retailer (2) • Food (2) • Media (1) • Construction (1) • Consumer Goods (1) • Hospital (1) • Agriculture (1) • Maritime (1) • Military (1) • Rescue (1) • Service provider (1) • Transportation (1) • Travel (1) • Legal (1) (Multiple assignments possible).
About KonBriefing Research
KonBriefing Research is an independent researcher and analyst in the field of IT security, information security, risk management and compliance. The company was founded in 2019 and is based in Germany.
About the author

Author:
Bert Kondruss
Founder and managing director of KonBriefing Research
Founder and managing director of KonBriefing Research