❓ A WA parliamentary question on notice reveals varying levels of attempted cyber attacks across different government departments and agencies between March 2017 and August 2018. Lotterywest experienced frequent external attacks, while the Department of Premier and Cabinet faced millions of internal attempts, with two successful email phishing incidents.
AnsweredQoN 3670Legislative Assembly
Asked
14 August 2018
Member
Portfolio
Premier; Minister for Public Sector Management; State Development, Jobs and Trade; Federal-State Relations
QuestionView source ↗
For all departments, agencies, government trading enterprises or boards within the Minister’s portfolio responsibilities I ask since 11 March 2017: (a) How many attempted cyber attacks have there been on internal network systems and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet or customer related detail compromised; (b) How many attempted cyber attacks have there been on external network systems or websites and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet or customer related detail compromised; and (c) How many attempted cyber attacks have there been on any internet enabled devices (i.e. iPhones, iPads etc.) and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet related detail compromised?
AnswerView source ↗
Answered
18 September 2018
Response time
9 days
Goldcorp
(a)-(c) None
Lotterywest,
(a) Since 11 March 2017 Lotterywest has had no attempted cyber attacks on internal network systems.
(i) Not applicable.
(ii) Not applicable.
(iii) Not applicable.
(b) Since 11 March 2017 Lotterywest has had mulitple cyber attacks per day on external network systems and websites.
(i) Lotterywest is unable to confirm the number of cyber attacks performed by a non-state foreign actor as different methods used to mask the origin of the attacks make it difficult to identify the exact locality or origin.
(ii) Lotterywest is unable to confirm the number of cyber attacks performed by a nation-state foreign actor as different methods used to mask the origin of the attacks make it difficult to identify the exact locality origin.
(iii) There were no successful cyber attacks and no material containing Cabinet or customer related detail was compromised.
(c) Since 11 March 2017 Lotterywest has had no attempted cyber attacks on Lotterywest's internet enabled devices (i.e. IPhones, iPads etc.)
(i) Not applicable.
(ii) Not applicable.
(iii) Not applicable.
Department of Premier and Cabinet
(a) Approximately 1.85 Million.
(a)(i) Unable to confirm specific number or actors.
(a)(ii) Unable to confirm specific number or actors.
(a)(iii) Two incidents were successful (Email Phishing), both of which were remediated without the disclosure of any material containing Cabinet or Customer details.
(b) Approximately 7,360.
(b)(i) Unable to confirm specific number or actors.
(b)(ii) Unable to confirm specific number or actors.
(b)(iii) None.
(c) No cyber-attacks detected.
(c)(i)-(c)(iii) Not Applicable.
Public Sector Commission
a) The Public Sector Commission’s internal network systems are managed by the Department of the Premier and Cabinet (DPC). Please see the DPC response to this question.
(b) One of the Commission’s contracted services providers responsible for external websites has indicated that there were two incidents since March 2017 that may have constituted attempted cyber-attacks on a single website.
(i) There is nothing to suggest the involvement of a non-state foreign actor.
(ii) There is nothing to suggest the involvement of a nation-state foreign actor.
(iii) There is no information available that suggests these alleged cyber-attacks were successful. Further, there is no information available to suggest any material containing Cabinet or customer related detail has been compromised.
(c) The Commission’s internet enabled devices are managed by DPC. Please see the DPC response to this question.
Salaries and Allowance Tribunal
Please refer to the response from the Department of the Premier and Cabinet, which is the service provider to the Tribunal.
Department of Jobs, Tourism, Science and Innovation
(a) Nil.
(a)(i)-(iii) Not applicable.
(b) Nil.
(b)(i)-(iii) Not applicable.
(c) Nil.
(c)(i)-(iii) Not applicable.
(a)-(c) None
Lotterywest,
(a) Since 11 March 2017 Lotterywest has had no attempted cyber attacks on internal network systems.
(i) Not applicable.
(ii) Not applicable.
(iii) Not applicable.
(b) Since 11 March 2017 Lotterywest has had mulitple cyber attacks per day on external network systems and websites.
(i) Lotterywest is unable to confirm the number of cyber attacks performed by a non-state foreign actor as different methods used to mask the origin of the attacks make it difficult to identify the exact locality or origin.
(ii) Lotterywest is unable to confirm the number of cyber attacks performed by a nation-state foreign actor as different methods used to mask the origin of the attacks make it difficult to identify the exact locality origin.
(iii) There were no successful cyber attacks and no material containing Cabinet or customer related detail was compromised.
(c) Since 11 March 2017 Lotterywest has had no attempted cyber attacks on Lotterywest's internet enabled devices (i.e. IPhones, iPads etc.)
(i) Not applicable.
(ii) Not applicable.
(iii) Not applicable.
Department of Premier and Cabinet
(a) Approximately 1.85 Million.
(a)(i) Unable to confirm specific number or actors.
(a)(ii) Unable to confirm specific number or actors.
(a)(iii) Two incidents were successful (Email Phishing), both of which were remediated without the disclosure of any material containing Cabinet or Customer details.
(b) Approximately 7,360.
(b)(i) Unable to confirm specific number or actors.
(b)(ii) Unable to confirm specific number or actors.
(b)(iii) None.
(c) No cyber-attacks detected.
(c)(i)-(c)(iii) Not Applicable.
Public Sector Commission
a) The Public Sector Commission’s internal network systems are managed by the Department of the Premier and Cabinet (DPC). Please see the DPC response to this question.
(b) One of the Commission’s contracted services providers responsible for external websites has indicated that there were two incidents since March 2017 that may have constituted attempted cyber-attacks on a single website.
(i) There is nothing to suggest the involvement of a non-state foreign actor.
(ii) There is nothing to suggest the involvement of a nation-state foreign actor.
(iii) There is no information available that suggests these alleged cyber-attacks were successful. Further, there is no information available to suggest any material containing Cabinet or customer related detail has been compromised.
(c) The Commission’s internet enabled devices are managed by DPC. Please see the DPC response to this question.
Salaries and Allowance Tribunal
Please refer to the response from the Department of the Premier and Cabinet, which is the service provider to the Tribunal.
Department of Jobs, Tourism, Science and Innovation
(a) Nil.
(a)(i)-(iii) Not applicable.
(b) Nil.
(b)(i)-(iii) Not applicable.
(c) Nil.
(c)(i)-(iii) Not applicable.
Explore WA Government Data
Search the full archive in the free dashboard, or query programmatically via API.
Explore more
Government Gazette
Appointments, regulatory notices, planning changes.
Hansard
Debates, questions, speeches and sentiment.
Tabled Papers
Reports and documents tabled in Parliament.
Committees
Committee profiles and recent reports.
Regulations
Subsidiary legislation with filters and summaries.
Bills
Proposed laws and parliamentary progress.
Acts
Current WA legislation and summaries.
Explanatory Memoranda
Bills with EMs (text/PDF) available.
Members
MP profiles, party breakdown and rankings.
Pollie Rankings
Data-driven rankings across 19 categories.
Amendment Chains
Track how schemes and regulations evolve over time.