Public incident case studies
Cyber incidents, traced to the consequence. Public-source analysis focused on what happened, what it cost, which readiness gaps mattered, and what changed afterwards.
The organisations profiled are not and have not been Lykos Defence clients. These case studies are based solely on public-source information and examine publicly documented incident impacts, outcomes, and preparedness considerations.
Resolved enforcement outcome
2023 cyber-attack · Federal Court outcome 2026
A$3.0M court-ordered financial outcome A$2.5M penalty + A$500k ASIC costs
385GB confidential information stolen
18,000 clients notified
4+ years cybersecurity failures cited Read the case study → Material impact documented
2023 cyber incident · Remediation and investigations ongoing
A$68.3M 2023 cyber-related costs and provisions Pre-tax, reported in Latitude’s 2023 Annual Report
7.9M drivers' licence numbers stolen
6.1M additional partial records
5–6 weeks platform restoration Read the case study → Impact known; proceedings ongoing
2022 cybercrime event · Regulatory proceedings ongoing
A$160.8M cumulative disclosed non-recurring cybercrime costs Medibank disclosed A$160.8 million in non-recurring cybercrime costs through FY26.
9.7M Australians in OAIC allegations
~520GB data allegedly extracted
No MFA on VPN, OAIC alleges Read the case study → 2022 Incident date · Australia
A$160.8M cumulative disclosed non-recurring cybercrime costs
2023 Incident date · Australia / New Zealand
A$68.3M 2023 cyber-related costs and provisions
2023 Incident date · Australia
A$3.0M court-ordered financial outcome
Schematic world map showing countries and regions associated with the case studies. Markers use the precision stated in each case record. Select a map marker to see the associated case study.
No case studies match those filters. Try removing one or more filters.
