Queensland’s cyber security department was targeted in a cyber attack that resulted in the loss of $809,000 in public money, its annual report has revealed.
The incident took place in July 2025 and was motivated by financial gain, according to the report. The department said no government data or sensitive information was compromised and that the attack was blocked.
The Queensland Department of Customer Services, Open Data and Small and Family Business leads the state’s cyber security strategy, despite the attack involving systems linked to its operations.
A spokesman said the systems of a third-party telecommunications provider had been accessed illegally. He added that the money did not fall into the hands of those responsible for the attack.
“Immediate steps were taken to contain and investigate the incident, and security controls have been further strengthened,” the spokesman said.
The department’s annual report says it is responsible for “setting the strategic direction for improving cyber resilience across the Queensland government”.
“The department blocked the attack and engaged a third party to mitigate any further exposure,” the report stated.
“The Queensland government is committed to protecting the security and resilience of its systems and services.”
