Cyber Incident Victim: Melbourne International Shooting Club
Date:
Nov 2017
Location:
Australia
Summary
A cybersecurity breach at the Melbourne International Shooting Club compromised private details of 540 members, potentially exposing storage locations and types of over 1500 semi-automatic handguns, primarily kept in residential premises. The incident raised concerns about targeted thefts, with individual firearms valued at approximately $5000 on illicit markets and high-risk weapons like Glocks and Colt .45 automatics specifically mentioned. Members expressed fears for personal safety should criminal actors access the data, while authorities investigated the scope of unauthorized access without disclosing audit protocols or regulatory oversight of similar firearm databases.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In November 2017, the Melbourne International Shooting Club experienced a cybersecurity breach compromising its member database. The incident exposed private details of 540 members from the Port Melbourne-based club, including the types of firearms they owned. The database contained information on more than 1,500 semi-automatic handguns stored by members, with individual weapons valued at a minimum of $5,000 on the black market. Most members reportedly owned multiple firearms, typically storing them in residential premises. One member disclosed keeping nine handguns at home, including high-demand models such as a 9mm Glock and Colt .45 automatic—weapons particularly sought after in criminal circles. Members expressed concerns that the leaked information could enable targeted thefts, with one stating criminals would find the guns "quite valuable" and fearing for family safety if data reached malicious actors. Another member estimated the club's database might contain records for up to 3,000 firearms, though the exact scope remained unverified.
Victoria Police initiated an investigation to determine what data attackers accessed during the breach. Authorities declined to disclose how many gun clubs maintained comparable databases, their regulatory oversight, or whether such systems compromised efforts to control illegal firearm proliferation. The breach raised unresolved questions about the total number of weapons cataloged in similar private databases across the state and the frequency of police audits for these systems. No official confirmation emerged regarding specific security measures at the club, the breach methodology, or whether affected members received direct notifications. The incident highlighted vulnerabilities in decentralized firearm record-keeping outside government registries, leaving members uncertain about ongoing risks while police inquiries continued without public resolution.