A WA parliamentary question seeks data on cyber attacks against government entities since January 2025. The response details the number of attempted attacks, attribution challenges, and a single successful attack on customer data at the Legal Practice Board.

AnsweredQoN 1320Legislative Assembly
Asked
2 December 2025
Portfolio
Regional Development; Ports; Science and Innovation; Medical Research; Kimberley

QuestionView source ↗

I refer to all departments, agencies, government trading enterprises or boards within the Minister’s portfolio responsibilities since 1 January 2025, and I ask: (a) How many attempted cyber attacks have there been on internal network systems and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet or customer related detail compromised; (b) How many attempted cyber attacks have there been on external network systems or websites and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet or customer related detail compromised; and (c) How many attempted cyber attacks have there been on any internet enabled devices (i.e. iPhones, iPads etc.) and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet related detail compromised?

AnswerView source ↗

Answered
17 February 2026
Responded by
Parliamentary Secretary to the Regional Development; Ports; Science and Innovation; Medical Research; Kimberley
Response time
4 days
a) The WA Security Operations Centre provides 24/7 monitoring of the networks and systems of over 120 govenment entities. Since 1 January 2025, 1,083,730 attempts on these networks were detected.
i-ii) The origin of these attempts is often not discernable as attackers frequently employ techniques to mask their identity and location and as a result, it is difficult to definitively attribute these attempted breaches to either non-state foreign actors or nation-state entities.
iii) Successful attacks involve exfiltration of Government data and/or disruption of Government services. There was one cyber attack that affected customer-related data during this period relating to the Legal Practice Board, details of which are publicly available. No other attacks were successful, and no Cabinet information was compromised during this period.
b) Data is not collected on cyber attacks extenal to the WA Government.
c) The WA Government, does not collect detailed statistics on attempted attacks against individual devices. Instead, security incidents are monitored at the network or system level.

Explore WA Government Data

Search the full archive in the free dashboard, or query programmatically via API.

Explore more