Defence Housing Australia (DHA) has initiated an investigation into a possible data breach that may have affected its services or the data of Australian Defence personnel. The investigation, conducted in collaboration with the Defence, aims to determine the extent of the breach and ascertain if the information of Defence personnel or their families has been compromised.
DHA, a government business enterprise (GBE), emphasized that there has been no impact on its own systems or any breach of its ICT systems. The breach appears to be associated with a third-party service provider.
Prompt Notification and Collaboration
DHA has taken swift action by notifying relevant authorities, including the Australian Cyber Security Centre (ACSC), the Department of Home Affairs‘ Cyber Security Response Unit, and the Office of the Australian Information Commissioner (OAIC). Additionally, the Department of Veterans’ Affairs (DVA) has been informed about the incident.
Support for Affected Personnel
DHA has expressed its commitment to provide support to affected Defence personnel and their families. Those requiring assistance can contact IDCARE, which is Australia’s national identity and cyber support community service.
The Department of Veterans’ Affairs (DVA) has also extended support services through Open Arms – Veterans & Families Counselling. This service is available 24/7 and can be reached at 1800 011 046 or through their website www.openarms.gov.au.
Service Provider Not Named
The incident notification did not reveal the identity of the breached third-party service provider, leaving room for further investigations into the source of the breach.
This case underscores the significance of maintaining robust cybersecurity measures and conducting thorough investigations to safeguard sensitive information and uphold data privacy standards.


