NSW government disputes alleged data breach

The New South Wales government has dismissed allegations of a data breach after the ransomware group Nova leaked a 200GB sample on the dark web. Nova, a Russian-speaking group, posted a countdown timer threatening to release the full dataset unless a deal is reached, though NSW chief cybersecurity officer Marie Patane stated there was no evidence of sensitive information being accessed. The leaked files included three emergency response project documents from the early 2010s and four rural NSW topographic maps, all confirmed as publicly available. Nova claimed to have received a $704,000 offer to sell the data but has not yet finalized negotiations. The group’s countdown timer remains at approximately 13 days and 4 hours. Nova operates under a ransomware-as-a-service (RaaS) model, where affiliates deploy malware for a share of ransom payments. Cyber criminology expert Mandy Turney noted that such groups rely on reputation and victim fear, sometimes exaggerating or fabricating breaches to pressure payments. Nova has banned multiple affiliates for violating its policies, emphasizing trust within its network. This marks Nova’s first Australian target, with 140 leak posts since April 2025. NSW has faced at least seven public service data breaches since 2020, including a recent incident where a Treasury worker allegedly stole government documents. Turney cautioned that penalties alone do not improve cybersecurity, despite breaches posing national security and public trust risks. The government’s denial contrasts with Nova’s aggressive tactics, leaving uncertainty over whether the breach is genuine or a fabricated threat for extortion.