Historic ransomware & data breach
Initial access 12 February 2024 · ransomware and nationwide disruption 21 February
192.7Mpeople impacted by the breachHHS records approximately 192.7 million individuals as affected by the Change Healthcare breach.
- US$3.87B+
- disclosed response and business-disruption impact
- >US$9B
- interest-free funding advanced to care providers
- 9 days
- from initial remote access to ransomware deployment
Read the case study→Production largely restored
Ransomware disclosed 16 July 2026 · majority production restored by 27 July
U.S.-widefairlife production temporarily suspendedRansomware reached production-related systems and led fairlife to suspend production operations across the United States.
- 4
- U.S. facilities in the recovery
- 11 days
- from disclosure to majority production restored
- 1
- Canadian production network unaffected
Read the case study→Resolved enforcement outcome
2023 cyber-attack · Federal Court outcome 2026
A$3.0Mcourt-ordered financial outcomeA$2.5M penalty + A$500k ASIC costs
- 385GB
- confidential information stolen
- 18,000
- clients notified
- 4+ years
- cybersecurity failures cited
Read the case study→Material impact documented
2023 cyber incident · Remediation and investigations ongoing
A$68.3M2023 cyber-related costs and provisionsPre-tax, reported in Latitude’s 2023 Annual Report
- 7.9M
- drivers' licence numbers stolen
- 6.1M
- additional partial records
- 5–6 weeks
- platform restoration
Read the case study→Recovered; investigation ongoing
Incident disclosed 10 June 2026 · all three mills operational by 26 June
2 millsnormal operations haltedThe incident stopped milling and cane haulage at Farleigh and Racecourse during the crushing season.
- 16 days
- until all three mills were operational
- ~1,300
- farms in the Mackay Sugar supply network
- ~700,000t
- average annual raw sugar production
Read the case study→Impact known; proceedings ongoing
2022 cybercrime event · Regulatory proceedings ongoing
A$160.8Mcumulative disclosed non-recurring cybercrime costsMedibank disclosed A$160.8 million in non-recurring cybercrime costs through FY26.
- 9.7M
- Australians in OAIC allegations
- ~520GB
- data allegedly extracted
- No MFA
- on VPN, OAIC alleges
Read the case study→Investigation and attribution ongoing
Coordinated OT attacks 26–27 July 2026 · investigation and attribution ongoing
30+Minnesota water systems affectedMalicious activity reached technology used to remotely monitor and control community water infrastructure.
- 100+
- internet-exposed U.S. water-sector systems targeted in July
- ~90 min
- to restore Braham’s water plant
- US$14,495
- proposed replacement of 15 older Alpena cellular modems
Read the case study→Regulatory and class-action ongoing
Data breach 17–20 September 2022 · regulatory and class-action litigation ongoing
A$140Mcustomer response and recovery provisionProvision for identity document replacement, credit monitoring, the independent review, and related response activity.
- 9.5M+
- former and current customer records accessed
- 2.47M
- active subscribers had identity information accessed
- 4 years
- access-control coding error existed before the breach
Read the case study→No case studies match those filters. Try removing one or more filters.
