What happened
In December 2023 Nissan Oceania was hit by a cyber attack that exposed the personal information of around 100,000 people across Australia and New Zealand, including — for some — government identification such as Medicare, licence and passport numbers [nswgov-nissan] [securityweek-nissan]. Nissan disclosed the breach and began notifying affected individuals in March 2024.
Timeline
- 2023-12 — Cyber attack on Nissan Oceania systems [securityweek-nissan].
- 2024-03 — Public disclosure; ~100,000 people notified across AU & NZ [nswgov-nissan].
Current status
Resolved; affected individuals notified with identity-protection guidance. Figures are as reported. [nswgov-nissan]
Why it matters
A trans-Tasman breach exposing government identity documents — the category of data that carries the highest downstream fraud risk.