WA Parliamentary Question on Notice reveals attempted cyber attacks on government agencies, with the Department of Justice experiencing the highest number. Some agencies don't track attempted attacks, and attribution is difficult.

AnsweredQoN 3678Legislative Assembly
Asked
14 August 2018
Portfolio
Attorney General

QuestionView source ↗

For all departments, agencies, government trading enterprises or boards within the Minister’s portfolio responsibilities I ask since 11 March 2017: (a) How many attempted cyber attacks have there been on internal network systems and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet or customer related detail compromised; (b) How many attempted cyber attacks have there been on external network systems or websites and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet or customer related detail compromised; and (c) How many attempted cyber attacks have there been on any internet enabled devices (i.e. iPhones, iPads etc.) and if any: (i) How many of these were conducted by a non-state foreign actor; (ii) How many of these were conducted by a nation-state foreign actor; and (iii) How many were successful and was any material containing Cabinet related detail compromised?

AnswerView source ↗

Answered
20 September 2018
Response time
11 days
The Corruption and Crime Commission:
(a) The Corruption and Crime Commission currently keeps a three month rolling cycle of unsuccessful access attempts from external systems. The Commission is only interested if an attempted attack has breached the Commission's security controls.
Internet Threats (previous three months) -
Email Threats (previous three months) -
(i) The Commission cannot attribute cyber attacks to individual or state actors.
(ii) The Commission cannot attribute cyber attacks to individual or state actors.
(iii)  Nil.
(b) Nil.
(i) - (iii) Not Applicable.
(c) Nil.
(i) - (iii) Not Applicable.
The Department of Justice:
(a) 12,893.
(i) 12,893.
(ii) - (iii) Nil.
(b) 233,131.
(i) 233,131.
(ii) - (iii) Nil.
(c) Nil.
(i) - (iii) Nil.
Equal Opportunity Commission:
(a)-(c) Nil.
LegalAid Western Australia:
(a) Legal Aid WA is not aware of any attempted cyber attacks on internal network systems
(b) Internet facing external network systems and websites at Legal Aid WA are subjected to ongoing “attempted cyber-attacks”. Legal Aid WA does not record the number of attempted cyber-attacks on Internet facing external network systems and websites.
(iii) Legal Aid WA is not aware of any successful cyber attacks on external network systems or websites
(c) Internet enabled devices (i.e. iPhones, iPads etc.) at Legal Aid WA are subjected to ongoing “attempted cyber-attacks”. Legal Aid WA does not record the number of attempted cyber-attacks on Internet enabled devices (i.e. iPhones, iPads etc.)
(iii) Legal Aid WA is not aware of any successful cyber attacks on Internet enabled devices (i.e. iPhones, iPads etc.)
Office of the Information Commissioner:
(a) Nil.
(i)-(iii) Not applicable.
(b) Nil.
(i)-(iii) Not applicable.
(c) Nil.
(i)-(iii) Not applicable.
Office of the Director of Public Prosecutions:
(a) No.
(b) The ODPP's external network is managed and maintained by the Department of Justice.
(c) No.
Office of the Commissioner for Children and Young People, State Solicitors Office, Solicitor General's Office:
Incorporated into the Department of Justice.

Explore WA Government Data

Search the full archive in the free dashboard, or query programmatically via API.

Explore more