Public Notification Register - Eligible Data Breach (PPIP Act)
This page provides details of the public notification of an eligible data breach under the Privacy and Personal Information Protection Act 1988 (NSW) (PPIP Act). A public notification is provided where we are unable to notify, or it is not reasonably practicable to notify, some or all individuals affected by the incident directly. The public notification register is set out below.
Important information regarding Fairfield City Council cyber incident
Fairfield City Council experienced a cyber incident in October 2025 involving unauthorised access by an unknown third party to a portion of our IT environment.
As soon as this incident was detected, a response team was quickly mobilised, and work began to ensure the security and integrity of our systems. We would like to assure you that the incident was swiftly contained, and our systems are secure.
We have been working with external experts from across the cyber security industry in response to this incident and have also informed the relevant government agencies and law enforcement authorities, including the Information and Privacy Commission NSW (IPC), Office of the Australian Information Commissioner (OAIC), the Australian Cyber Security Centre (ACSC), and Cyber Security NSW.
To ensure we are taking all appropriate steps in response to this incident, we have conducted a detailed review to determine what data was involved and whether it contained any personal information. Our investigation has unfortunately discovered that this incident involved information relating to some of our staff and residents. We provide further information below on the types of information involved, along with guidance on the steps we recommend our community takes in response to this incident.
