πŸ”’breach.co.nz Β· the NZ & Australia breach register πŸ›‘οΈ A Govern service
Register β€Ί πŸ‡¦πŸ‡Ί AU β€Ί Other
Other sector Β· leaderboard
Own the Other leaderboard
The top banner across the Other overview and every Other record β€” one advertiser, exclusively.
Own this leaderboard β†’ breach@govern.co.nz

Metricon Homes

πŸ‡¦πŸ‡Ί Australia Β· Metricon Homes Β· Record AU-2025-0298
β—‹ Reported β€” awaiting official confirmation
Reported β€” awaiting official confirmation. The facts below are drawn from the organisation's own disclosure and credible reporting. Figures are as reported; unknowns are labelled, not estimated by us.
People affected
Not disclosed
Breach date
2025-07
Regulator
OAIC and ACSC (notified)
Trust tier
B Β· Reported
TimelineDisclosed within the same month after the breach (dates as precise as the sources allow)
Breach
Jul 2025
Disclosed
Jul 2025
Disclosed β€” no regulator outcome yet
as of 7 Nov 2026
Share this record in Β· Share on LinkedIn ⬇ Download share card

Data exposed

Not confirmed by Metricon. The Qilin ransomware group claimed to have stolen employee details, finance/HR documents and credit-card receipts (an unverified threat-actor claim) Media-reported

Confidence: Confirmed = regulator/court Β· Company-confirmed = the organisation's own disclosure Β· Media-reported = press. Figures without an official source are labelled, not estimated.

What happened

In July 2025 Metricon Homes, one of Australia’s largest home builders, confirmed a cyber incident affecting its internal systems [metricon-cd], [metricon-reb]. The Qilin ransomware group listed Metricon on its leak site and posted sample data it claims was stolen; Metricon said it was investigating the claims and working to determine the scope of the incident [metricon-cd], [metricon-reb]. Metricon has not confirmed, in the sources found, that personal information was compromised, and no number of affected individuals has been stated or is estimated here.

Timeline

  • 2025-07 β€” The Qilin group listed Metricon on its leak site (post dated 21 July 2025) [metricon-cd].
  • 2025-07 β€” Metricon confirmed a cyber incident and said it had notified the OAIC, the ACSC and law enforcement (by 29 July 2025) [metricon-cd], [metricon-reb].

Current status

Reported β€” awaiting official confirmation of what data, if any, was taken. The group’s claims are unverified [metricon-cd].

Why it matters

Construction and home-building firms hold rich financial and identity data on customers β€” an under-watched sector for breach risk.

GGOVERN Tabletop Exercises Β· Govern house Strengthen your cyber resilience β€” rehearse the decisions that matter. Book a Discovery Call β†’