Australian Government Suffers A Widespread Ransom Attack

Multiple departments and agencies of the Australian government are victims of the cyber attack. In a recent speech Air Marshal and National Cybler Security coordinator, Darren Goldie confirmed that a total 65 agencies had been caught up in the incident.

It is now reported that The Russian ransomware group ALPHV, also known as BlackCat, hacked the commercial law firm, HWL Ebsworth, that operates throughout Australia in April 2023, stealing 3.6TB of confidential data the firm held on behalf of private sector clients as well as a large number oof governmental organisations. It is these that have now been affected. 

ALPHV are the perpetrators of a large-scale ransom attack on major US Casino operators MGMGrand and Caesars Palace. 

ALPHV was one of the top three ransomware groups targeting Australia, according to a recent study by cybersecurity firm Palo Alto Networks. Goldie said that individual agencies would continue to assist affected clients and the investigations under way by the Australian federal police and Victoria police would continue that some clients of the law firm with personal information exposed in the hack have yet to be informed.

Goldie also revealed he had delayed informing the public quickly to avoid sparking anxiety in those potentially affected. He also confirmed the Australian federal police and the Department of Home Affairs were victims of the hack, while also being agencies responsible for investigating it.

When hackers exposed the passports, licenses and medical ID cards of 9.8 million current and former clients of Australian mobile-phone operator Optus last year, the company commissioned Deloitte to review what went wrong. The ALPHV group is typically paid to hack others and has been active since late 2021 and the cyber security company Sophos said the group has consistently targeted large organisations.

Ground News:   HWL Ebsworth:     CSO Online:    Bloomberg:   TEISS:   BankInfoSecurity:   Guardian

Image. Thitima Thongkham

You Might Also Read: 

Seiko Attacked By BlackCat:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

 

« Chinese Hackers Have Been Reading US Government Emails
Exploring How Generative AI Is Contributing To Cybersecurity Threats & Risks »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Perforce Software

Perforce Software

Perforce helps companies build complex software products more collaboratively, securely, and efficiently.

Basis Technology

Basis Technology

Basis Technology provides software solutions for text analytics, information retrieval, digital forensics, and identity resolution.

KLC Consulting

KLC Consulting

KLC Consulting offers information assurance / Security, IT Audit, and Information Technology products and services to government and Fortune 1000 companies.

Zivaro

Zivaro

Zivaro provides transformational consulting and technology services to help clients attain real business value from their technology investments.

Elliptic

Elliptic

Elliptic solve the crucial problem of identity in cryptocurrencies, with the sole purpose of combating suspicious and criminal activity.

ubirch

ubirch

The ubirch platform is designed to ensure that IoT data is trustworthy and secure.

HITRUST Alliance

HITRUST Alliance

HITRUST provides widely-adopted common risk and compliance management frameworks, related assessment and assurance methodologies.

Red River

Red River

Red River is a technology transformation company, bringing 25 years of experience and mission-critical expertise in analytics, cloud, collaboration, mobility, networking and security solutions.

ditno

ditno

ditno uses machine learning to help you build a fully governed and micro-segmented network. Dramatically mitigate risk and prevent lateral movement across your organisation – all from one centralised

SightGain

SightGain

SightGain is the only integrated risk management solution focused on cybersecurity readiness using real-world attack simulations in your live environment.

Triaxiom Security

Triaxiom Security

Triaxiom Security offers penetration testing, security audits, and strategic consulting customized to meet your needs.

NetWitness

NetWitness

NetWitness empowers security teams to rapidly detect today’s targeted and sophisticated attacks with unparalleled visibility.

Celebrus

Celebrus

Celebrus Fraud Data Platform, by D4t4 Solutions, works with existing fraud structures to augment functionality and turn fraud management into true fraud prevention.

TriCIS

TriCIS

TriCIS design and engineer highly secure integrated solutions that meet the highest government and military security standards, providing information assurance to organisations across the globe.

Nullify

Nullify

Nullify is your automated security sentry that continuously finds and fixes security issues across your codebase.

Applied Insight

Applied Insight

Applied Insight work closely with government agencies and industry to overcome technical and cultural hurdles to innovation, empowering them with the latest cloud, data and cyber capabilities.