The NSW Government yesterday declared a significant cyber incident after a data breach allegedly involving a NSW Treasury staff member.
Internal security monitoring detected a suspected transfer to an external server of a substantial cache of documents containing confidential commercial and financial information. The files cover multiple NSW Government departments and projects.
NSW Treasury reported the matter to NSW Police on Sunday. Police then launched an investigation under Stike Force Civic, leading to criminal charges overnight.
While the police are continuing their investigation, they believe all the alleged stolen data has been located, is now secure, and there was no external compromise to the agency's system.
The NSW Chief Cyber Security Officer is currently coordinating the Government's whole-of-agency response, as per the State's cyber security plan. There is no current impact to any NSW Government service.
I thank NSW Police and Cyber Security NSW for their rapid actions since Sunday.