Ventia successfully resolves July 2023 cyber incident, reinforcing robust security measures

In July 2023, Ventia detected a cyber incident impacting a select few internal systems. As soon as the incident was detected, Ventia initiated their incident response plan, in line with their focus on prioritising the security and safety of employees, customers, and stakeholders.  

As a key service provider to a variety of critical functions within the Government and private sector, the security of Ventia's customers and the broader community is paramount.

Immediate response and containment measures

Ventia acted swiftly to successfully contain and shut down the incident with first steps including engagement of leading external cyber security experts, including CyberCX, to conduct a thorough forensic investigation and support the systems assurance process. Ventia also proactively notified customers, relevant regulators and law enforcement agencies to maintain transparency.

Recovery and system restoration

Ventia quickly re-established system access for customers and other external stakeholders, ensuring minimal disruption to business operations. Ventia  provided regular updates to customers during the incident and worked collaboratively to support them through the process.

No evidence of a ‘Notifiable Data Breach’

Importantly, following a comprehensive investigation, Ventia confirmed that there was no evidence of a Notifiable Data Breach under the Privacy Act 1988. That means that no personal information was lost, accessed or shared during the incident. Ventia’s rapid detection, coordinated response and proactive involvement of regulating bodies demonstrates its proficiency and dedication to protecting  customer data.  

Continued vigilance and commitment to security

Ventia successfully closed the cyber incident in August 2023. Since then, the insights gained have been used to further enhance Ventia’s cyber security defences. 

Delivering secure digital solutions lies at the core of Ventia’s commitment to redefining service excellence. Safeguarding customer systems and data is Ventia’s top priority, evidenced by clearly defined risk objectives, strong leadership engagement, and continual investment in cyber security capability. 

Need More Information About This Cyber Incident?

Anyone who would like further information can contact Ventia in Australia or New Zealand.