New South Wales police investigating online court registry data theft

Australia’s New South Wales police says it is investigating a major data security incident that involved threat actors accessing the NSW Online Registry and downloading more than 9,000 sensitive court files.

 

In a recent press release, NSW Police said that cyber crime detectives are investigating a major data breach involving the Department of Communities and Justice (DCJ). The detectives were notified of the breach on March 25 after several documents of the NSW Online Registry were accessed and downloaded by an unauthorised third party.

 

NSW Online Registry, a portal overseen by the DCJ, lets members access sensitive confidential information about both civil and criminal cases across the NSW court system.

 

“Yesterday (Tuesday 25 March 2025), officers attached to the State Crime Command’s Cybercrime Squad were alerted of the breach to the NSW Online Registry Website (ORW), a secure online platform that provides access to information involved in both civil and criminal cases across the NSW court system.

 

“Cybercrime detectives commenced an investigation under Strike Force Pardey and are working closely with DCJ in order to contain the breach after approximately 9000 sensitive court files, including apprehended violence orders and affidavits, were downloaded,” reads the press release.

 

A spokesperson for NSW police did not share details on who is responsible for the data security incident or how the threat actor infiltrated the network and stole the data. However, the department has assured that it will share more details as it investigates the full extent of the breach.

 

Acknowledging the reports of the data security incident, in a statement shared with the media, NSW Attorney-General Michael Daley said, “I’ve been advised by the Department of Communities and Justice about a significant cyber breach affecting the NSW Online Registry Website.

 

“The NSW government is taking this incident seriously. I am assured that DCJ is working with Cyber Security NSW [and] the NSW Police to ensure the ongoing integrity of the system.

 

“They are also working to urgently identify and contact affected users and the public will be kept updated as more information becomes available,” Daley added.