Cyber Incident Victim: Department of Communities and Justice
Date:
Mar 2025
Location:
Australia
Summary
The Departmentof Communities and Justice oversees the NSW Online Registry where a breach led to the download of approximately 9,000 sensitive court files, including apprehended violence orders and affidavits. Cybercrime detectives attached to Strike Force Pardey are investigating the incident, working with the agency and Cyber Security NSW to contain the breach and determine its full scope. Authorities urge anyone who may be affected to report via ReportCyber, while experts warn the exposure could endanger domestic violence victims and undermine confidence in the court process.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
OnTuesday 25 March 2025, officers attached to the State Crime Command’s Cybercrime Squad were alerted to a breach of the NSW Online Registry Website, a secure online platform overseen by the Department of Communities and Justice that provides access to civil and criminal case information across the NSW court system. Cybercrime detectives commenced an investigation under Strike Force Pardey after approximately 9,000 sensitive court files, including apprehended violence orders and affidavits, were downloaded from the portal. The breach was described by NSW Police as a major data breach affecting the NSW Online Registry. The articles indicate that the breach was identified on the same day and that investigators began working closely with the Department of Communities and Justice to contain the incident.
NSW Police stated that investigations remain ongoing to establish the full extent of the breach and that they are working with the Department of Communities and Justice to contain the breach. The NSW Attorney‑General Michael Daley said he had been advised by the Department of Communities and Justice about a significant cyber breach affecting the NSW Online Registry Website and that the state government is taking the incident seriously. He added that the Department of Communities and Justice is working with Cyber Security NSW and the NSW Police to ensure the ongoing integrity of the system and to urgently identify and contact affected users, with the public to be kept updated as more information becomes available. Anyone who thinks their details may have been compromised is being urged to make a report through the federal government's ReportCyber website, and anyone with information that may assist investigators is urged to contact Crime Stoppers via phone or website, with assurances that information is treated in strict confidence.
Legal experts have raised concerns about the impact of the breach on vulnerable individuals, noting that the unauthorized access of private information could endanger domestic violence victims. Samantha Lee, the supervising solicitor at the Redfern Legal Centre, said it would be devastating for those who have apprehended violence orders before the court and that very personal information could compromise their safety. She also warned that the breach may undermine confidence in the court process despite the benefits the online portal provides to many users. The articles conclude that the investigation is ongoing and that further details will be released as they become available.