March saw a concerning increase in cyberattacks on government services like Ambulance Victoria and the Department of Communities and Justice (DCJ), and trusted brands like Sydney Tools, Nine Newspaper, 13Cabs and Vroom. With sensitive data exposed and essential services disrupted, the rise in cyberattacks is raising serious concerns about security, trust, and how consumers can protect themselves.
Sydney Tools
One of Australia’s largest tooling stores recently had a mind blowing 34 million online orders and 5,000 current and former employee records exposed. The compromised database contains full names, email addresses, phone numbers, home addresses, and order details of customers. It also includes employee salaries, sales targets, and branch locations. Given the nature of the breach, we expect to see a rapid increase in identity theft, phishing attacked and potentially even physical theft

Nine Newspapers
Nine Newspapers, one of Australia’s largest media companies, experienced a significant data leak that exposed the personal details of 16,000 customers. The details and nature of the leaked data are said to include customer names, addresses and email IDs. Nine has since stated that the data did not include credit card details or passwords and that they are consulting third parties on how best to resolve the issue.
13cabs
The famous taxi service 13cabs, also joins the list of victims, with hackers compromising around 11,000 records of customer data. Personal information such as names, phone numbers, addresses, and even details related to users eligible for the Taxi Subsidy Scheme were accessed by the attackers. The company reset passwords for affected accounts and is currently working with cybersecurity specialists to investigate the breach.
Vroom
Australian fintech company Vroom by YouX, formerly known as Drive IQ has had a massive 27,000 records exposed. The database of records which lacked essential security measures like password protection and encryption, held sensitive personal information like driver’s licenses, medical records, employment statements, and bank details. The exposed data was a major concern, revealing bank statements that contain account numbers and partial credit card numbers, all readily available. Similar to that of the Sydney Tools breach, we expect to see a rise in phishing scams and identity theft involving the brand.

Ambulance Victoria
Ambulance Victoria found itself under attack when a former employee allegedly accessed and stole personal and financial data of up to 3,000 staff members. Among the stolen data were sensitive details like bank accounts, tax numbers, and other personal information. This breach is particularly alarming because it involved an insider threat, with the attacker still having access to sensitive systems even after leaving the company. Authorities are investigating the incident, and employees affected by the breach have been urged to monitor their accounts for unusual activity.
Department of Communities and Justice (DCJ)
Approximately 9,000 sensitive court files were leaked from the New South Wales (NSW) court system, including critical documents such AVOs and affidavits. The leak was traced to a security vulnerability within the court registry’s online system, which exposed a large amount of personal and legal information. The files that contained highly confidential data were made available to unauthorised individuals, posing a serious privacy threat. As a result, NSW authorities have taken the system offline, initiated an investigation, and are assessing the scale of the damage.

Tips to Stay Safe
- Use strong, unique passwords: Avoid reusing passwords and combine letters, numbers, and special characters.
- Enable two-factor authentication (2FA): Add an extra layer of security by requiring a second verification step.
- Monitor your accounts: Regularly check bank and credit card statements for suspicious activity.
- Update software regularly: Keep devices and software up to date with the latest security patches.
- Be cautious with personal information: Carefully consider what information you share online and with whom.
Concerned about a data leak? Try ID Protection free for 7 days – no strings attached. Stop sites from collecting your data, stay alert to data leaks on the internet or dark web, secure your social media accounts, defend against online threats and generate and manage passwords.