Cyber Incident Victim: Australian Bureau of Statistics
Date:
Aug 2016
Location:
Australia
Summary
The Australian Bureau of Statistics experienced a major outage of its digital census website due to distributed-denial-of-service attacks attributed to overseas hackers. The agency took the system offline as a precaution, preventing data compromise and ensuring over two million submitted forms were securely stored; however, the disruption caused widespread public frustration and criticism, including political calls for an inquiry and social media backlash under the #CensusFail hashtag.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On 9 August 2016, Australia’s first digital census experienced widespread disruptions when the Australian Bureau of Statistics (ABS) website became inaccessible to millions of citizens attempting to complete the mandatory survey. The ABS attributed the outage to four distributed-denial-of-service (DDoS) attacks originating from overseas hackers, which overwhelmed the site’s servers with malicious traffic. David Kalisch, the head of the ABS, confirmed the attacks during an interview with ABC News Radio, stating the system was taken offline as a precautionary measure to protect user data. Prime Minister Malcolm Turnbull echoed this assessment, emphasizing that no personal information was compromised during the incident. Despite these assurances, the outage prevented a significant portion of the population from submitting census forms, though over two million submissions had been successfully processed and stored prior to the shutdown. The ABS issued a public apology for the inconvenience while maintaining that the decision to suspend the website was necessary to safeguard data integrity.
The incident sparked immediate criticism, with Independent Senator Nick Xenophon labeling it a "monumental failure of a government program of the first order" and demanding an official inquiry. Public frustration escalated on social media, where the hashtag #CensusFail trended as users shared their experiences and concerns about the system’s reliability. The ABS released an official statement clarifying that the disruption was caused by denial-of-service attempts rather than a successful breach or data theft. At the time of initial reporting, the census website remained offline, prolonging uncertainty about when services would resume. The event marked a significant setback for Australia’s transition to digital government services, undermining public confidence in the ABS’s capacity to manage large-scale online initiatives securely. Government officials continued to stress that no evidence suggested any compromise or loss of submitted census data throughout the incident.