
Authorities have made a significant breakthrough in investigating a major data breach affecting up to 1 million New South Wales (NSW) residents and the Australian Capital Territory (ACT). A 46-year-old man was arrested in Fairfield West following a police operation related to the breach, with charges of blackmail expected to be laid against him.
The breach, which has prompted a collaborative effort between NSW police, federal agencies, and international partners, involves personal information accessed through Outabox, an IT provider utilized by numerous hospitality venues, including the prominent Merivale group.
Police are scrutinizing a website allegedly established by the suspect, allowing individuals to search the leaked database, although details were redacted. It’s believed the database contained over a million records.
Detective Acting Superintendent Gillian Lister of the cybercrime squad emphasized the importance of cyber hygiene, urging individuals to strengthen their online security measures.
The motive behind the breach, whether blackmail or corporate sabotage, remains under investigation. Detective Chief Superintendent Grant Taylor highlighted the focus on apprehending those responsible and cautioned against obtaining new identification documents until the extent of the data exposure is clarified.
ClubsNSW confirmed several clubs and pubs were affected by the cybersecurity incident, while Outabox stated they were investigating the breach in cooperation with law enforcement.
The NSW government closely monitors the situation, emphasizing the need for affected venues to notify patrons. Meanwhile, cybersecurity experts assess the potential risks associated with the leaked information, advising precautionary measures.
Winstone House, 3rd Floor,
Units 306-309, 2-4 Dollis park,
London, N3 1HF
020 8349 4363
© 2026, Lyonsdown Limited. teiss® is a registered trademark of Lyonsdown Ltd. VAT registration number: 830519543