Caloundra, Queensland, Australia

The organisation operates as a photography business located in Caloundra, Queensland, Australia. It provides a range of photographic services including portrait sessions, event coverage, and commercial imagery for local clients. The business uses its online presence to showcase portfolios and attract bookings from individuals and organisations in the region. Its core activity centres on delivering high‑quality images that meet the specific needs of its customers.

Before the October 2023 incident, the photographer’s Facebook business page had accumulated approximately sixteen thousand followers, reflecting a notable online following. The page also housed seven years of photographic archives, customer order records, and related business data. This digital repository supported the day‑to‑day operations of the enterprise, including the management of prepaid calendar orders valued at around three thousand dollars. The substantial online footprint indicated that the business relied heavily on social media for marketing and client engagement.

A distinguishing attribute of the organisation is its dependence on a single social media platform for both promotion and operational data storage, a practice that increased its exposure to credential‑theft attacks. The lack of multi‑factor authentication on the Facebook account was highlighted by cybersecurity experts as a key vulnerability that facilitated the compromise. Despite this weakness, the business had built a reputation for delivering consistent photographic work and maintaining a loyal customer base over several years. The phishing‑linked hijacking of the page resulted in the loss of content, follower base, and pending orders, underscoring the risks associated with insufficient account security.

Ownership details of the organisation are not disclosed in the available sources, and there is no indication of a parent company or subsidiary structure. The business appears to operate as an independent entity serving the Caloundra and broader Queensland market. No further information about organisational governance or equity holdings is provided in the incident report. Consequently, the profile concludes with the confirmed facts about the organisation’s services, online presence, and the security incident that affected it.