The Vice Society claimed responsibility for the incident.
Recall that attackers attacked the Australian Fire and Rescue Service in the state of Victoria on December 15, 2022. The hackers managed to cause outages in multiple systems and force the FRV to shut down its network while continuing to work offline. Among other things, cybercriminals stole data from the computers of the service, including information about current, former and seconded employees.
On January 6, 2023, the service reported the incident to the Office of the Information Commissioner and disclosed the preliminary results of an ongoing internal investigation.
Based on the published documents, the following fell into the hands of hackers:
Dates of birth;
Highly personal information about sexual orientation, race, disability, religion, qualifications, political and religious views;
Bank account details;
Driving license data;
Tax dossier numbers;
Birth, death and marriage certificates.
In addition to all of the above, the attackers were able to steal letters from corporate email boxes.
The results of the investigation came after the Vice Society group said it was behind the attack on the FRV and promised to leak everything stolen to the Web in the near future. On January 10, a post appeared on the hacker's website about the hacking of the service with a link to the stolen data. The link is currently down, giving firefighters a short delay before their data is released to the public.