Major Australia Data Breaches

Were You Affected by a Data Breach?

Millions of people have had their personal data exposed in recent years. If you were affected, you may be eligible to join a class action and receive compensation.

47M+

Records exposed in AU

8

Major breaches tracked

6

Active class actions

Free

To register interest

Major Australia Data Breaches

Select any breach below to register your interest. We will contact you if a class action opens that you may be eligible for.

Medibank

2022 • 9.7 million records affected

Class action filed

Hackers accessed and published sensitive health records of Medibank and ahm customers, including data about sensitive medical conditions and procedures.

Data Exposed

Names, dates of birth, Medicare numbers, health claims data, contact details

Optus

2022 • 9.8 million records affected

Investigations ongoing

A cyberattack exposed personal information of current and former Optus customers. Affected data included government ID numbers for approximately 2.8 million people.

Data Exposed

Names, dates of birth, phone numbers, email addresses, home addresses, passport and licence numbers

Latitude Financial

2023 • 14 million records affected

Class action filed

One of Australia's largest ever data breaches, affecting Latitude Financial customers and former customers across Australia and New Zealand.

Data Exposed

Names, addresses, dates of birth, driver's licence numbers, passport numbers, financial statements

MediSecure

2024 • 12.9 million records affected

Investigations ongoing

Prescription delivery service MediSecure suffered a ransomware attack exposing highly sensitive health and personal information of patients.

Data Exposed

Names, dates of birth, addresses, Medicare numbers, prescription information

Canva

2019 • 137 million records affected

Resolved

Australian graphic design platform Canva was breached, exposing account data for over 137 million registered users worldwide.

Data Exposed

Usernames, real names, email addresses, city/country data, bcrypt-hashed passwords

Resolved — No Active Claims

HWL Ebsworth

2023 • Extensive government and corporate files records affected

Investigations ongoing

Major Australian law firm HWL Ebsworth was targeted by the ALPHV/BlackCat ransomware group, exposing sensitive files from dozens of government agencies and corporate clients.

Data Exposed

Legal documents, government agency data, client files, internal correspondence

Australian National University (ANU)

2018 • 200,000 records affected

Resolved

ANU suffered a sophisticated cyberattack that exposed 19 years of personal data for students, staff and visitors.

Data Exposed

Names, addresses, dates of birth, phone numbers, personal email addresses, emergency contact details, tax file numbers, payroll information, bank account details, student academic records

Resolved — No Active Claims

Ticketmaster / Live Nation

2024 • 560 million (global) records affected

Investigations ongoing

Cloud data provider Snowflake was breached, exposing data from Ticketmaster and other major companies. Millions of Australian customers were included.

Data Exposed

Names, addresses, phone numbers, partial payment card data, ticket purchase history

Get Notified About New Data Breach Class Actions

New breaches happen constantly. Be the first to know when a class action opens that affects you.

By submitting, you consent to ClaimBar storing your details and notifying you about developments related to this breach, including class action filings, claim deadlines, and settlement updates. We do not share your information with law firms or third parties unless you separately request to be connected with a lawyer. You can request deletion at any time by emailing info@claimbar.com. Compliant with ACL Section 18.

About this page

Information on this page is general in nature and does not constitute legal advice. ClaimBar tracks class action settlements and provides updates. Always seek professional legal advice for your specific circumstances. Data breach information is sourced from public records, regulatory disclosures, and news reports. Record counts are approximate. The existence of a breach does not guarantee you are entitled to compensation β€” eligibility depends on the specific circumstances and the outcome of any legal proceedings.