A WA parliamentary question on notice regarding cybersecurity measures and incidents within the Minister for Health's portfolio, revealing numerous threat detections but minimal impact and no illegal file access.

AnsweredQoN 564Legislative Assembly
Asked
25 May 2017
Portfolio
Deputy Premier; Minister for Health; Mental Health

QuestionView source ↗

In respect of the Minister’s portfolio responsibilities for departments, agencies or publicly owned corporations: (a) how much money was spent on anti-virus, network security, firewall or anti-malware software in the last financial year; (b) from 17 March 2017 to 19 May 2017, have there been any reported instances of: (i) Viruses: (A) if so, what systems were affected, for how long and was there any downtime (in hours) for each system; (ii) Malware: (A) if so, what systems were affected, for how long and was there any downtime (in hours) for each system; (iii) Cyber-attack: (A) if so, what systems were affected, for how long and was there any downtime (in hours) for each system; and (B) was this attack reported to the WA or Australian Federal Police? If not, why not; (iv) DNS attack: (A) if so, what systems or websites were affected, for how long and was there any downtime (in hours) for each system; and (B) was this attack reported to the WA or Australian Federal Police? If not, why not; (v) Infected websites: (A) if so, what websites were infected / hacked, for how long and was there any downtime (in hours) for each system; (c) From 17 March 2017 to 19 May 2017 have any network files been illegally accessed by external individuals or organisations: (i) if so, what files were illegally accessed and when; (ii) if so, were the WA Police or Australian Federal Police informed of this illegal access; and (iii) if not, why not?

AnswerView source ↗

Answered
27 June 2017
Response time
7 days
(a) Please refer to clause a) of Legislative Assembly Question on Notice 549.
Department of Health advises:
(b)(i)-(b)(v) From 17 March 2017 to 19 May 2017, there have been 1,305 detections. 1,272 detections were automatically rectified by anti-malware services with no impact to any systems and no downtime. 32 detections required manual rectification with no impact to any systems and no downtime. One detection required manual rectification, impacted a single network drive and resulted in one hour downtime.
There was no requirement to report these detections to the WA or Australian Federal Police.
(c)(i)-(c)(iii) No. Not applicable.
Fiona Stanley Hospital advises:
(b)(i)-(b)(v) From 17 March 2017 to 19 May 2017, there have been 26 detections. No systems were affected as it was detection of threats only and systems were not infected.
There was no requirement to report these detections to the WA or Australian Federal Police.
(c)(i)-(c)(iii) No. Not applicable.
Mental Health Commission:
(b)-(c) Nil. Not applicable.
Health & Disability Services Complaints Office (HADSCO):
(b)-(c) No. Not applicable.
Healthway:
(b)-(c) No. Not applicable.
Animal Resources Authority:
(b)-(c) Nil. Not applicable.

Explore WA Government Data

Search the full archive in the free dashboard, or query programmatically via API.

Explore more