Mandurah SES Confirms Unauthorized Server Access; Operations Unaffected
Summary
Mandurah SES confirmed unauthorized access to a server holding pre-2022 records. Historical data was later published online, but the unit says operations continue normally and there is no evidence other systems were affected.
Key points
- WA Cyber Security Operations notified Mandurah SES on 5 October 2026 of unauthorized access to one of its servers.
- The server held historical records from before 2022; Mandurah SES said there was no evidence other systems were affected.
- The unit says its operations continue as normal and are unaffected.
- Several compressed backup files and a folder of historical operations and planning data were published online as of 13 October.
- Mandurah SES is contacting impacted past and present members and providing advice on protecting personal information, with support from the Department of Fire and Emergency Services.
- The Gentlemen ransomware group listed Mandurah SES on its leak site; the article also identifies a recent group victim as All Souls St Gabriels School.
Article Details
- Victim Organization
- Mandurah State Emergency Service (Mandurah SES)
- Incident Type
- Cyber security incident involving unauthorised access to one server; The Gentlemen ransomware group listed Mandurah SES on its darknet leak site.
- Disclosure Date
- 2026-10-05
- Data Types Exposed
- Historical operations and planning data
- Compressed backups
- Operational Impact
- Mandurah SES reported that operations continued as normal and were unaffected. The affected server held only historical records from before 2022, and the unit reported no evidence that other systems were affected.
- Ransom Or Extortion
- The Gentlemen listed Mandurah SES on its darknet leak site. Mandurah SES said further data had been published online as of 2026-10-13. No ransom demand or payment was reported.
- Claim Status
- confirmed