Gridware Logo

Alleged Breach Threatens Over 4 Million .au Domains

By Ahmed Khanji Updated 15 October 2025 3 min read

in 𝕏
Alleged Breach Threatens Over 4 Million .au Domains

The Alleged Breach: What’s Happening?

auDA, Australia’s internet domain administrator, is investigating an alleged data breach involving 15GB of data. This could affect anyone with an AU domain, given auDA’s authority over domain space.

auDA discovered a potential breach last Friday. The following day, they released more information and notified the Australian Cyber Security Centre, the Department of Home Affairs, and the Office of the Australian Information Commissioner about the situation.

Understanding auDA

auDA controls all Australian websites ending with .au, and as of the given date, they have registered 4,255,871 .au domains. If you have a website like this, you’ve interacted with them.

This alleged breach is big news, especially if hackers have more data than they’re letting on. There’s potential it might affect everyone with an .au domain.

Details of the Alleged auDA Breach

A cybercriminal claims to have stolen specific data, with the authenticity still under investigation. The alleged 15GB of stolen information includes:

  • Legal documents
  • Passports
  • Personal data
  • Bank account details
  • Medical reports
  • Loan repayment information
  • Death certificates

Typically, to steal someone’s identity, attackers need access to a combination of personal details. The range of information that was allegedly accessed in this case is especially worrisome.

What to Do if You Suspect Identity Theft?

If you’re worried about the recent situation with auDA and how it might affect you, it’s good to know what to do if your identity is at risk. These steps aren’t just for this incident; they can help you in any case of identity theft. Here’s what you can do:

  1. Secure Your Accounts: Change passwords and freeze any suspicious accounts. If needed, you can use password managers, which store your passwords securely and help you create strong, unique passwords for each of your accounts.
  2. Review and Report: Check credit reports with Australian agencies for fraudulent activity and report concerns.
  3. Contact Authorities: Alert local law enforcement and relevant governmental bodies, such as the Australian Taxation Office, in case of tax-related fraud.
  4. Place a Credit Alert: In Australia, you can place a ban on your credit report to prevent anyone from accessing your credit information without your consent.

Find more easy tips and information to keep your personal and business data safe in our Cyber Security Guide.

Stay Informed, Updates to Follow

The alleged data breach affecting au domain holders is still being investigated. As of now, it’s only a claim, not a proven fact. Our team will continue to monitor the situation and provide updates as more information becomes available. Check back regularly for the latest news.

SITUATION UPDATE:

auDA has concluded their investigation into the recent alleged cyber incident, revealing no evidence of access to their systems or data compromise. The breach’s source was traced back to an Australian sole trader targeted by a malware attack. You can read their official statement here.

Ahmed Khanji

Ahmed Khanji

CEO, Gridware

Ahmed Khanji is the CEO of Gridware, a leading cybersecurity consultancy based in Sydney, Australia. He is recognised for his insights into offensive security and emerging technologies such as blockchain, and often contributes to broader cybersecurity conversations across the country. With an extensive background as a security advisor to major Australian enterprises, Ahmed helps organisations navigate the evolving threat landscape with clarity and confidence.