Home · Wiki · Incidents & Campaigns
type: incident · created: 2026-08-28 · updated: 2026-09-18 · tags: [cyber, incident] · confidence: high · severity: medium · affected_sectors: [financial services, telecommunications] · au_impact: true

NSW Police, acting on a referral from Queensland Police, charged a 30-year-old telco employee at a station in Sydney's west over allegedly accessing customer data and selling it to criminal groups, with police alleging the information was then used to commit fraud against multiple victims. The man faces 12 counts of dealing in identity information to commit an indictable offence, 12 counts of unauthorised function with intent to commit a serious offence, and 10 counts of an agent corruptly receiving a benefit. Insider threat remains the vector most often passed over in favour of external breach activity, and this is a direct Australian example of identity-data exfiltration from a consumer telecommunications carrier.

Source

  • iTnews
  • Captured via /raw/digests/Cyber-Digest-2026-08-28.md