A cyberattack targeting Victoria’s court system has reportedly resulted in sensitive case information being published on the dark web, with fears the leak may include the identities of parties involved in family violence intervention order matters and children’s court proceedings. Victoria Police and court authorities are investigating the scope of the breach.
For the families already navigating the trauma of the family violence system, the news of a possible data leak lands as a fresh and specific fear — not of an abstract hack, but of the exact kind of information an abusive partner or ex-partner might go looking for.
What has actually happened #
Court Services Victoria, the agency responsible for the state’s court IT infrastructure, has acknowledged a cybersecurity incident affecting its systems. It is understood the breach may have exposed a range of court records, though the full extent of what was accessed has not yet been confirmed publicly. VCN understands from reporting by other outlets that some of the compromised material may include names of parties in family violence intervention order hearings and matters before the Children’s Court.
We have not independently verified the specific contents of any leaked files, and we are not republishing or describing any details that could identify individuals involved in those proceedings. Given the statutory protections that apply to these matters, we will not be doing so at any point in our coverage, regardless of what may circulate elsewhere online.
Why this category of data is so dangerous if exposed #
Family violence intervention order proceedings exist specifically to protect people — often women and children — from a person the court has found there is reason to fear. Under section 166 of the Family Violence Protection Act 2008 (Vic), publishing information likely to identify a protected person or affected family member in these proceedings is a criminal offence. The same goes for identifying a child involved in Children’s Court matters under the Children, Youth and Families Act 2005 (Vic).
These aren’t bureaucratic technicalities. In practice, an intervention order file can contain a person’s current address, workplace, the school a child attends, or details of a safety plan built around keeping that information away from a particular individual. If that information ends up on the dark web, the risk isn’t reputational — it is physical safety.
Sources close to the investigation have told VCN that authorities are treating the potential exposure of family violence and children’s court material as a priority concern, separate to the broader question of how the breach occurred in the first place.
What authorities are saying #
Court Services Victoria said in a statement that it was investigating the incident and working with cybersecurity specialists to assess what data may have been affected. Victoria Police is investigating alongside relevant state agencies, and it is understood specialist cybercrime detectives have been engaged to trace how the material was obtained and where it has been distributed.
It is understood affected individuals will be contacted directly where their information is confirmed to have been compromised, in line with standard data breach notification practice. VCN has sought further comment on the timeline for notifications and any interim safety advice being given to people whose intervention order or children’s court matters may be involved.
What this means if you have a matter before the family violence or children’s courts #
If you currently have an active intervention order, or a children’s court matter, and you’re worried about whether your information may have been part of this breach, family violence support services say there are practical steps worth taking now rather than waiting for official confirmation:
- Review and, if needed, update your personal safety plan, particularly around home address, workplace and school routines.
- Contact Safe Steps or your family violence caseworker if you have one — they can help assess immediate risk and connect you with additional support.
- Be alert to unusual contact attempts, whether by phone, email or in person, from anyone who should not have your current details.
- Keep a record of anything that feels like it may be linked to a breach of your privacy, including screenshots, dates and any suspicious contact, in case it is needed later.
Specialist family violence lawyers say people should not assume their information was necessarily part of the leak, but that heightened caution is reasonable while the investigation continues. Legal Aid and community legal centres can advise on whether any additional protective orders are appropriate if a person believes their safety has been compromised as a result of the breach.
The broader pattern of pressure on public data systems #
This incident sits within a wider pattern of cyberattacks on Australian institutions holding sensitive personal data, from health providers to telecommunications companies in recent years. What sets this case apart is the nature of the data at stake — not credit card numbers or addresses in the abstract, but information deliberately restricted by law because its disclosure has been assessed by parliament as capable of causing serious harm.
It raises uncomfortable questions about how well-resourced our court IT systems are to defend information that the justice system itself treats as among the most sensitive it holds. Victorian courts already operate under strict suppression and non-publication frameworks specifically because the stakes of getting identification wrong in family violence and children’s matters are so high. A cybersecurity failure that undermines those protections from the back end, rather than through media publication, exposes a gap that legislation alone cannot close.
We understand government agencies are reviewing broader cybersecurity settings across the court system as a result of this incident, though no findings have yet been made public. VCN will continue to report on developments as official information becomes available, while maintaining our strict position of not identifying any party protected under Victorian law, regardless of what may appear in leaked material elsewhere.
What happens next #
The investigation into the breach is ongoing, and it is understood further updates will be provided as the scope of affected records becomes clearer. Anyone who has received a notification, or suspects they may be affected, is encouraged to follow the advice of Court Services Victoria and Victoria Police rather than relying on unconfirmed information circulating online.
This masthead will not publish, describe or link to any leaked material that could identify a party to a family violence intervention order or a child in Children’s Court proceedings. The matter remains under active investigation by Victoria Police and relevant agencies.
If you are affected by family violence and need support, you can contact Safe Steps on 1800 015 188, available 24/7. The 1800RESPECT national helpline is available on 1800 737 732. If you believe you or your family are in immediate danger, always call 000. Information about suspected criminal activity, including cybercrime, can be reported to Crime Stoppers on 1800 333 000.
