Your ad hereSponsor the Government briefing — the header banner on every printed and downloaded copy.
breach@govern.co.nz🔒 breach.co.nzThe NZ & Australia breach register · a Govern service
Printed 7 November 2026
breach.co.nz/sector/government/print/
breach.co.nz/sector/government/print/
🏛️ Government: reported data breaches
Every government breach in the breach.co.nz register, New Zealand and Australia, 2020–2026. Each line is a public record; follow the short link to see the sources.
11records
142K+people affected (disclosed, 2 of 11)
1 · 10NZ · AU
2confirmed by regulator / court
0penalties or court action
Largest by people affected
- Service NSW — 104,000 (approx) · AU · 2020-03
- South Australian Government (Frontier Software) — 38,000+ · AU · 2021-11
Suppliers named in these records: Accellion FTA (2) · GoAnywhere MFT (1) · Frontier Software (1). A supplier appearing here is not a finding against that supplier — see each record.
All 11 records
| Organisation | Breach | People | Data reported | Status | Tier |
|---|---|---|---|---|---|
| 🇦🇺 Court Services Victoria — online hearings databreach.co.nz/breach/au-2026-court-services-victoria | 2026-07 | Not disclosed | Information used to link participants to online hearings, 2022–2026 | Disclosed | B · Reported |
| 🇦🇺 Queensland Department of Educationbreach.co.nz/breach/au-2026-qld-education | 2026-05 | Not disclosed | Names, email addresses and school locations; Names, email addresses, student ID numbers and messages among users | Disclosed | B · Reported |
| 🇦🇺 Victorian Department of Educationbreach.co.nz/breach/au-2025-vic-education | 2025-11 | Not disclosed | Names, school-issued email addresses, encrypted passwords, school names and year levels of current and former students; the Department said dates of birth, home addresses and phone numbers were not exposed | Regulator action taken | A · Confirmed |
| 🇦🇺 Australian Human Rights Commissionbreach.co.nz/breach/au-2025-ahrc | 2025-03 | Not disclosed | Full names, email and residential addresses, mobile numbers, employer/role, and in some cases health information, schooling, religion and photographs | Disclosed | B · Reported |
| 🇦🇺 Court Services Victoriabreach.co.nz/breach/au-2023-court-services-victoria | 2023-12 | Not disclosed | Audio-visual recordings of court hearings | Disclosed | B · Reported |
| 🇦🇺 National Disability Insurance Agencybreach.co.nz/breach/au-2023-ndia | 2023-11 | Not disclosed | Full name, date of birth, gender and address/postcode of NDIS participants | Resolved | B · Reported |
| 🇦🇺 Tasmanian Department for Education, Children and Young Peoplebreach.co.nz/breach/au-2023-tas-education | 2023-03 | Not disclosed | Names, addresses, invoices and bank account numbers; Children's names, homerooms and year levels; dates of birth for some TasTAFE students | Disclosed | B · Reported |
| 🇦🇺 South Australian Government (Frontier Software)breach.co.nz/breach/au-2021-frontier-sa-gov | 2021-11 | 38,000+ | Name, date of birth and home address; Tax file number and bank account details | Disclosed | B · Reported |
| 🇦🇺 Transport for NSWbreach.co.nz/breach/au-2021-transport-for-nsw | 2021-01 | Not disclosed | Driver-licence information, names, email and residential addresses and contact numbers | Disclosed | B · Reported |
| 🇳🇿 Reserve Bank of New Zealand (Accellion FTA)breach.co.nz/breach/nz-2021-reserve-bank | 2020-12 | Not disclosed | Commercially and personally sensitive information held in a third-party file-transfer service | Resolved | A · Confirmed |
| 🇦🇺 Service NSWbreach.co.nz/breach/au-2020-service-nsw | 2020-03 | 104,000 (approx) | Personal information contained in 47 staff email accounts | Disclosed | B · Reported |
Reading this briefing
Tier A — Confirmed: a regulator or court has acted or published. Tier B — Reported: the organisation’s own disclosure or credible media, awaiting official confirmation. “People affected” is what the organisation or regulator disclosed; “Not disclosed” means no official figure exists, and we don’t estimate. Totals add disclosed figures only and may overlap.
breach.co.nz is an index of public record, not an investigator. Every record is drawn from regulator releases, court material or the organisation’s own disclosure, and links to its source online. Figures reflect what those sources reported; matters before the courts are allegations not yet determined. Check the live record for the latest — this print-out is a snapshot. Corrections: breach@govern.co.nz.