Queensland Government Cyber Attack Costs Department $809,000

According to the Queensland Government’s most recent annual report, a state government department lost $809,000 in public monies as a result of a cyberattack in July 2025. The incident involved unauthorised access to a third-party telecoms provider’s systems for financial gain. The department stated that it took swift action to contain the incident and tighten its security protocols.

The Customer Services, Open Data, and Small and Family Business Department, which leads the development of Queensland’s cyber security policy, verified the financial loss. However, it stated that no payments were paid directly to those involved for the incident.

The department also stated that no government or sensitive information was compromised during the attack. The incident has highlighted the security vulnerabilities that public-sector organisations confront when relying on third-party service providers.

Queensland Government Cyber Attack Leads to $809,000 Loss

According to the department’s annual report, the cyberattack occurred in July 2025 and resulted in a $809,000 loss in public funds. The incident specifically targeted a third-party telecoms provider’s systems rather than directly compromising government information systems.

According to a department official, the event was related to an attempted financial gain through illicit access. The agency responded immediately, taking efforts to limit the incident and examine how it occurred.

The department also hired an outside consultant to assist minimise further exposure. According to the study, the attack was prevented, and further security procedures were implemented to limit the likelihood of similar attacks in the future.

The official verified that no payment was given to the individuals who carried out the cyber assault. The department also emphasised that government data and sensitive information were secure during the event.

The department is responsible for establishing cyber security rules and giving assistance throughout Queensland’s public sector, therefore it plays an essential role in securing government computers. It also manages cyber security services used by many government agencies.

Queensland Government Strengthens Cyber Security Measures

The event was published alongside information on cyber security activity in other Queensland government departments. The Transport and Main Roads Department revealed in its annual report that it investigated more than 9,000 suspicious activity in the previous fiscal year.

In addition, the department reviewed over 3,000 cyber security incidents in order to protect transport services, information systems, and consumer data. These investigations aided in the early detection of possible attacks, minimising operating disturbance, and improving current security systems.

A representative for the transportation department stated that the department is always improving its cyber security capabilities through frequent monitoring, staff awareness seminars, and security audits. The department also implements targeted efforts that align with Queensland’s cyber security plan.

To secure key transportation operations, the department monitors suspicious activity and analyses potential threats. It also complies with regulatory requirements to notify persons if a security incident results in an eligible privacy violation.

Queensland Audit Office Highlights Third-Party Security Risks

The Queensland Audit Office published a report in March that examined the efficiency of IT security procedures at select state, municipal, and statutory organisations. To avoid exposing potential security flaws, the audit team was given the most access to two government institutions but did not reveal their identities publicly.

The report cautioned that more frequent and sophisticated cyber attacks could pose major dangers to businesses with insufficient security measures. It also suggested that public-sector organisations and local governments reassess their cyber security policies, particularly those that address third-party threats.

The recommendations included enhancing how businesses detect, assess, and monitor security dangers posed by external service providers. They also advocated for suitable risk-reduction measures and strengthened security against potential threats.

The Customer Services Department accepted all applicable recommendations and has been working on steps to strengthen cyber security across the Queensland government. Its most recent annual report shows the ongoing efforts to strengthen government systems and safeguard public information.