Queensland government department loses $800k in cyber attack

The Queensland government’s Customer Services, Open Data, and Small and Family Business department suffered a financial loss of more than $800,000 due to an external cyber attack in July 2025. This department plays a pivotal role in bolstering the state’s cyber security measures. The incident involved unauthorized access to the systems of a third-party telecommunications provider, aiming for financial gain.

Despite no government data or sensitive information being compromised, the department swiftly blocked the attack and engaged a third-party firm to mitigate any potential further damage. The department, responsible for setting cyber security policies and managing whole-of-government cyber security services, noted that the attack was contained and investigated immediately.

Further steps were taken to strengthen security controls. The department’s annual report revealed that they reviewed over 9,000 suspicious activities and investigated more than 3,000 cyber security events in the previous fiscal year, highlighting their proactive approach in early threat detection and reducing operational impacts.

The Queensland government remains committed to safeguarding the security and resilience of its systems and services. Following the incident, the department acknowledged legislative requirements to notify individuals in cases of eligible privacy breaches. The Queensland Audit Office’s report from March emphasized the need for public sector entities to review and update their policies to address the rising trend of sophisticated cyber attacks.

The Customer Services department agreed to all relevant recommendations, demonstrating their commitment to enhancing whole-of-government cyber security capabilities.