What Are The Latest Cyber Security Incidents In Australia All About?

The global digital world has been plagued by cybercriminals for a long time now.

This is why governments, businesses and even individuals look towards effective and trending cybersecurity solutions and other measures to protect themselves.

This is what the Australian Government had in mind when they released the 2023-2030 Australian Cyber Security Strategy on November 22, 2023.

This strategy is aimed to serve as a roadmap to help the country’s vision of becoming a world leader in cybersecurity by 2030. This was followed by an action plan to enhance cybersecurity measures for small and medium-sized businesses, as the country battled various cybercrime issues.

While this is a much-needed move, it seems hackers didn’t back off. This time they hit an Australian state court’s recording database and more!

So, what happened with the state court and what’s the latest in the world of cybersecurity? Let’s explore!
 

What Did The Hackers Do?

 

• According to a news release by Court Services Victoria (CSV), the court in the Australian state of Victoria, a cyber security incident led to cybercriminals gaining unauthorized access to the court’s databases that impacted Victoria’s courts and tribunals.

• This led to disruptions of the audio-visual in-court technology network. It even impacted video recordings, audio recordings and transcription services.

• The news release states that recordings of some hearings in courts between November 1 and December 21, 2023, could have been accessed, while also mentioning recordings before November 1 could be affected.

• Hearings where recordings may have been accessed include the Supreme Court, County Court, Magistrates' Court and Coroners Court. While the Children's Court doesn’t have any recording accessed in the date range, it could have included one from October that remained in the system. CSV said that no hearings from the VCAT (Victorian Civil and Administrative Tribunal) were accessed.

• CSV clarified that no other court systems or records, including employee or financial data, were accessed.

• While CSV was made aware of the cyber incident on December 21, the organization believes the incident occurred on December 8, 2023. However, since the system holds recordings for some time, the primary investigation period is set at November 1 to December 21, 2023.

• Upon being made aware of the incident, CSV took immediate action to isolate and disable the affected network and made arrangements to “ensure continued operations across the courts”, so that hearings set for January could proceed.

   

What Did Court Officials Say?

 

• The news release consisted of a statement from Louise Anderson, the CEO of Court Services Victoria, who said, “Maintaining security for court users is our highest priority.  Our current efforts are focused on ensuring our systems are safe and making sure we notify people in hearings where recordings may have been accessed.”

• [Contd.] “We understand this will be unsettling for those who have been part of a hearing.  We recognise and apologise for the distress that this may cause people.  CSV has established a Contact Centre with dedicated staff which is available to those seeking further information or assistance.”

• [Contd.] “We are working closely with the cyber security experts in the Victorian Department of Government Services. All relevant authorities have been notified of the incident and are assisting with the investigation and response.”

• [Contd.] All courts have put in place arrangements so that they can continue to safely and securely hear matters while CSV re-establishes the affected network.  We appreciate the cooperation of court users during this period.”

 
In another incident in the country, Eagers Automotive revealed that a cyber incident had led to an outage. An investigation found that the incident included unauthorized access to parts of the company’s IT systems by a third-party accessing data from the company’s servers.

As per a statement by the company, “The company is in the process of notifying a small number of individuals identified who may face serious risk of data misuse.” However, the company didn’t reveal the exact number of affected individuals.

Do you think companies and governments need to enforce stronger measures to protect sensitive and private data? Do you think businesses need multiple approaches to secure their systems againts cyber threats?

Let us know in the comments below!