🔒breach.co.nz · the NZ & Australia breach register 🛡️ A Govern service
By sector › Other

🗂️ Other — data breaches

12 records in the other sector across New Zealand and Australia.

🖨 Printable Other briefing
Other sector · leaderboard
Own the Other leaderboard
The top banner across the Other overview and every Other record — one advertiser, exclusively.
Own this leaderboard → breach@govern.co.nz
Melbourne International Film Festival
🇦🇺 Melbourne, VIC · breach 2026-05
● Disclosed
People affected
26,782+
Data taken
Names, email addresses, phone numbers and residential addresses; MIFF said no credit-card information or account passwords were accessed, and that the dataset does not include purchase history, booking totals or membership details
Regulator
OAIC and ACSC (notified)
Trust tier
Reported
Source: Cyber Daily · View record →
Metricon Homes
🇦🇺 Australia · breach 2025-07
● Disclosed
People affected
Not disclosed
Data taken
Not confirmed by Metricon. The Qilin ransomware group claimed to have stolen employee details, finance/HR documents and credit-card receipts (an unverified threat-actor claim)
Regulator
OAIC and ACSC (notified)
Trust tier
Reported
Source: Cyber Daily · View record →
Sponsored placement
Reach decision-makers, in-feed
Native placement alongside the breaches your buyers are already reading.
Enquire → breach@govern.co.nz
Qantas
🇦🇺 Sydney, NSW (AU; NZ regulator also notified) · breach 2025-06-28
● Disclosed
People affected
5,700,000 (approx)
Data taken
About 4 million records: names, phone numbers, email addresses and Frequent Flyer details, About 1.7 million of those records also included one or more of address, date of birth, gender and meal preferences, Passwords and PINs not compromised
Regulator
OAIC (preliminary inquiries closed; no regulatory action)
Trust tier
Confirmed
Source: Qantas · View record →
The Fullerton Hotel Sydney
🇦🇺 Sydney, NSW · breach 2025-03
● Disclosed
People affected
Not disclosed
Data taken
Employee records and the credit-card details of a small number of guests, Attacker claim (Akira ransomware group): more than 148 GB including driver licences, passports, other employee and customer documents, financial data, NDAs and contracts
Regulator
OAIC (notified)
Trust tier
Reported
Source: Cyber Daily · View record →
Compass Group (Australia)
🇦🇺 Australia · breach 2024-09
● Disclosed
People affected
Not disclosed
Data taken
Some data taken from part of the IT network (the company said; data types not confirmed), The Medusa group claimed the data includes employee wage declarations and passport and driver's licence scans (possibly of contractors)
Regulator
OAIC and ACSC (notified)
Trust tier
Reported
Source: Cyber Daily · View record →
MediaWorks
🇳🇿 Auckland · breach 2024-03
● Disclosed
People affected
403,000 (approx)
Data taken
Name, date of birth, gender, postal address/postcode, email and phone number; in some cases images or videos submitted with competition entries. MediaWorks said no passwords, ID documents or financial data were involved
Regulator
NZ Privacy Commissioner (notified)
Trust tier
Reported
Source: RNZ · View record →
Nissan Oceania
🇦🇺 Australia & New Zealand · breach 2023-12-05
● Disclosed
People affected
100,000 (approx)
Data taken
Government ID for up to ~10% of those affected (approx. 4,000 Medicare cards, 7,500 driver licences, 220 passports, 1,300 tax file numbers); for ~90%, other personal information such as loan transaction statements, employment/salary details and dates of birth
Regulator
None confirmed in cited sources
Trust tier
Reported
Source: ID Support NSW (NSW Government) · View record →
DP World Australia
🇦🇺 Australia (national ports) · breach 2023-11
● Disclosed
People affected
Not disclosed
Data taken
Personal information of current and former employees
Regulator
OAIC (notified)
Trust tier
Reported
Source: DP World Australia · View record →
Harcourts Melbourne City
🇦🇺 Melbourne, VIC · breach 2022-10
● Disclosed
People affected
Not disclosed
Data taken
Names, addresses, bank details and signatures, Photo identification of prospective renters
Regulator
OAIC (notified)
Trust tier
Reported
Source: InnovationAus · View record →
AA Traveller
🇳🇿 New Zealand · breach 2021-08
● Disclosed
People affected
Not disclosed
Data taken
Names, addresses and contact details (phone/email), For older records, expired credit-card numbers held on a legacy system
Regulator
NZ Privacy Commissioner (notified)
Trust tier
Reported
Source: RNZ · View record →
Air New Zealand — Airpoints
🇳🇿 Auckland · breach 2021-02
● Disclosed
People affected
Not disclosed
Data taken
Names, tier status and Airpoints membership numbers (not passwords, card details, itineraries, passport numbers or contact details)
Regulator
None reported
Trust tier
Reported
Source: RNZ · View record →
Toll Group
🇦🇺 Melbourne, VIC · breach 2020-05
● Disclosed
People affected
Not disclosed
Data taken
Personal information of past and present employees, Details of commercial agreements with current and former enterprise customers
Regulator
None reported
Trust tier
Reported
Source: iTnews · View record →
GGOVERN Tabletop Exercises · Govern house Strengthen your cyber resilience — rehearse the decisions that matter. Book a Discovery Call →