The Australian government has officially concluded its coordinated response to the cyberattack on law firm HWL Ebsworth, which lasted for four months. National Cyber Security Coordinator Air Marshal Darren Goldie announced that the response had reached an appropriate juncture, and the law firm is now managing its response without formal government assistance. The government remains prepared to reactivate coordinated support if the situation evolves.
Impact on Government Entities: For the first time, the Australian government has confirmed the scale of the incident, revealing that a total of 65 Australian government entities were impacted as direct clients of the law firm through its legal and consulting services. This number is higher than previously reported figures, which stated “more than 40” entities were affected.
Private Sector Impact: In addition to government entities, a large number of private sector clients of the law firm were also impacted by the cyberattack.
Sensitive Information Exposure: Sensitive personal and government information was known to have been compromised in the incident.
Lessons Learned
Air Marshal Goldie emphasized that there are lessons to be learned from the incident, both for government and industry. A thorough review will be conducted in collaboration with HWL Ebsworth and relevant stakeholders from the Australian government, states, and territories to identify lessons and inform future responses to cyberattacks.
The conclusion of the incident response underscores the importance of cybersecurity preparedness and coordination efforts in responding to cyber threats against government and private sector entities.
