A significant cybersecurity breach has compromised the personal information of thousands of regional Victorian court users, with sensitive data published on an underground hacking forum. The leak has sparked an immediate investigation by the Victoria Police Cybercrime Squad and raised major safety concerns for individuals involved in legal proceedings.

The data exposure impacts participants of online hearings within the Magistrates' Court and Children's Court divisions. Exposed details include the names, emails, and job titles of individuals who attended digital hearings. More alarmingly, the leaked database contains highly sensitive information, such as the identities of parties involved in family violence intervention orders and children's court matters.

Regional Towns Impacted by the Breach

Court Services Victoria (CSV) confirmed that the compromised data spans a timeframe from 2022 to 2026. The breach specifically impacts regional courts across several Victorian locations, including Bendigo, Castlemaine, Echuca, Kerang, Kyneton, Maryborough, Mildura, Ouyen, Robinvale, and Swan Hill.

Other public information, such as courtroom details and case names, was also included in the massive data dump. A user on the dark web forum claimed responsibility for the leak, boasting that they had acquired approximately 28,600 lines of court records. Cybersecurity experts believe the leaked material contains metadata extracted from the video conferencing platform used by the courts to host remote hearings.

Ongoing Police Investigation and Safety Warnings

The exact number of people affected remains unknown, with CSV officials stating that the raw data is highly complex, incomplete, and difficult to verify. Despite extensive verification efforts, the full scale of the exposure remains unclear.

CSV and law enforcement agencies have advised anyone concerned about their personal safety to contact local police immediately or reach out to victim support services. Detective cybercrime squads are actively working alongside court services to assess and mitigate risks to state police databases.

A Pattern of Vulnerabilities

This incident is the latest in a worrying series of security failures for Victoria's justice system. It follows a significant ransomware attack in early 2024, widely suspected to be the work of international cybercriminals, and a previous security lapse when Children's Court data was inadvertently exposed online. Under Victorian law, publishing the identities of children involved in court proceedings is strictly illegal without judicial permission.

The hacker behind the court leak has also claimed responsibility for other high-profile Australian breaches, including a security compromise at the Melbourne International Film Festival earlier this year, which impacted thousands of patrons.