![\"A](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/09\/2374cd8c3bcb65cca9562708b7e23100.jpeg\")
<\/p>\nThe Queensland government department delivering the state’s first cyber security strategy lost more than $800,000 in a cyber attack, a new report has revealed.<\/p>\n
The Customer Services, Open Data and Small and Family Business department plays a lead role in strengthening the state government’s cyber security capabilities.<\/p>\n
In the department’s latest annual report, the entity noted it lost $809,000 in public money as a result of an external cyber attack in July 2025.<\/p>\n
A department spokesperson said no payment was made “to those responsible”.<\/p>\n
“The systems of a third-party telecommunication provider were accessed illegally for financial gain,” the spokesperson said in a statement.<\/p>\n
“Immediate steps were taken to contain and investigate the incident, and security controls have been further strengthened.”<\/p>\n
The review, released on Friday, said no government data or sensitive information was compromised during the incident.<\/p>\n
“The department blocked the attack and engaged a third party to mitigate any further exposure,” the report said.<\/p>\n
The entity is responsible for setting the cyber security policy and guidance for the state’s public sector and for managing whole-of-government cyber security services.<\/p>\n
“The Queensland government is committed to protecting the security and resilience of its systems and services,” the spokesperson said.<\/p>\n
Thousands of cyber security events<\/p>\n
In the Transport and Main Roads Department’s annual report, the entity said it reviewed more than 9,000 suspicious activities in the last financial year.<\/p>\n
The department also investigated more than 3,000 cyber security events.<\/p>\n
<\/p>\n
The Department of Transport and Main Roads investigated more than 3,000 cyber security events in the last financial year. (Supplied: Transport and Main Roads Queensland)<\/p>\n
“These efforts supported early threat detection, reduced operational impacts and informed ongoing improvements to security controls,” the report said.<\/p>\n
A transport department spokesperson said the entity continues to enhance its cyber security capability through continuous monitoring, staff awareness programs, security assurance activities, and targeted initiatives aligned with the state’s cyber security strategy.<\/p>\n
It said the department actively monitors and investigates suspicious activities to protect the state’s transport services, information systems, and customer data.<\/p>\n
Under legislative requirements, the department notifies individuals when an incident results in an eligible privacy breach.<\/p>\n
In March, the Queensland Audit Office published a report that examined and tested the effectiveness of a state government, local government, and statutory body’s IT security controls.<\/p>\n