Significant cyber incident downgraded
Media Release /Monday, 4 May 2026
The NSW Chief Cyber Security Officer has downgraded the recently declared ‘significant cyber incident’ allegedly involving a Treasury staff member.
Her declaration comes after the Taskforce the Government established in response to the data breach confirmed:
- The incident has been contained and is now in the recovery phase; and
- Agencies have implemented appropriate remediation measures.
While legal reviews are continuing, efforts to date to determine any potential impacts on active or past government procurements show that no project has been adversely affected.
I thank again Cyber Security NSW, the Taskforce, NSW Treasury and the NSW Police for their rapid actions since the breach was discovered, including launching Strike Force Civic.
The matter remains before the courts and is subject to an internal investigation.
