Most Recent
HWL Ebsworth faces OAIC investigation over data breach
The Australian Information Commissioner has launched an investigation into the personal information handling practices of law firm HWL Ebsworth following a cyberattack that saw the firm’s data dumped on the dark web. 
Cybersecurity threats keep ATO boss up at night
The head of the Australian Taxation Office has flagged cybersecurity as one of his greatest concerns amid millions of attempted cyberattacks on the tax office, saying the prospect of a data breach “keeps me awake at night”.
DVA may face class action for sharing veterans’ sensitive medical data
The Department of Veterans' Affairs is facing a class action investigation for allegedly sharing the sensitive medical and personal data of 300,000 veterans and their families without authorisation.
HWLE wins injunction against hackers behind data breach
HWL Ebsworth has won final orders barring unknown Russian-linked hackers from disseminating confidential information stolen during an April 2023 cyberattack.
Judge approves 27.5% GCO in ‘complex’ Medibank class action
A judge has signed off on a 27.5 per cent group costs order in a consolidated shareholder class action against Medibank over a cyberattack that affected 10 million customers, noting the “significant risk” taken on by the two plaintiff law firms running the action. 
Russian citizen hit with first-ever cyber sanctions over Medibank breach
The federal government has used its cyber sanction powers for the first time against a Russian individual identified as responsible for an attack against private health insurer Medibank that exposed almost 10 million customer records.
Australia to go its own way on AI by targeting high-risk uses
The Albanese government will focus the country's AI regulation on high-risk settings such as healthcare, opting for voluntary codes for less risky uses to allow the game-changing technology to flourish.
Medibank says allowing OAIC class action-style case could hurt public’s view of court
Medibank has asked a judge to put the kibosh on class action-style proceedings filed with the OAIC, arguing findings inconsistent with those in a class action over its October 2022 data breach could do damage to the public's view of the court.
Sensitive data of 223,000 people stolen in ACL data breach: OAIC
'Serious and systemic' failures in Australian Clinical Labs' cyber framework left the pathology services provider vulnerable to a cyberattack that exposed the sensitive health data of more than 223,000 people, including tests for fertility and sexually transmitted diseases, according to the OAIC.