In a serious security, around 9,000 sensitive court documents have been illegally downloaded from the NSW Online Registry Website (ORW), which authorities are calling a “significant data breach.”
See also: StreamElements reveals breach and data leak
The attack has prompted an immediate investigation by the New South Wales Police Crime Branch, codenamed Strike Force Pardey.
The system security breach was detected on Tuesday, March 25, 2025, when cybercrime officers were alerted to unauthorized access to the ORW platform, which acts as a secure repository of information for civil and criminal cases in the New South Wales court system.
The compromised files allegedly include highly sensitive documents, such as violence restraining orders (AVOs) and legal statements containing personal details of vulnerable individuals.
New South Wales Attorney-General Michael Daleyrevealed that the breach in NSW was initially detected during routine maintenance procedures by the Department of Communities and Justice's (DCJ) cyber unit.
See also: Oracle: Customers say their data was leaked after breach
The investigation revealed that the malicious actor had gained access to 9,000 files before DCJ cybersecurity experts intervened to contain the breach.
Specialists immediately closed the user's account and patched the vulnerability as soon as the breach was discovered. DCJ has implemented immediate mitigation strategies to contain the breach and prevent further unauthorized access to the affected system.
Authorities have confirmed that while the files have been downloaded, no information has been made public as of this writing, suggesting that the attack may still be in its early stages, with the potential for exploitation remaining a concern.
The NSW breach has raised serious concerns among domestic violence legal aid services and the community, due to the sensitive nature of the documents that have been breached.
See also: Coinbase was the target of GitHub Actions breaches
The term “file breaches” can refer to many situations, but it is usually associated with unauthorized access to or modification of files, such as:
- Security breach: When someone accesses files without the necessary permission, either through hacking or due to weaknesses in security systems.
- Data Breach: Refers to the leakage or theft of personal or sensitive data, such as financial information, identity details, etc.
- Copyright infringement: When someone copies or distributes copyrighted files without permission.
Source: cybersecuritynews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
