Victorian Court Data Leaked to Dark Web via WebEx Metadata
Personal details from regional Magistrates' and Children's Courts, including family violence cases, exposed in breach of 28,600 records.
Personal information belonging to users of the Victorian court system was leaked to a dark web hacking forum in July 2026. The breach exposes the identities of individuals participating in online hearings, creating significant privacy and safety risks for vulnerable parties.
The leak consists of approximately 28,600 lines of court records spanning from 2022 to 2026. According to ABC News, the compromised data was sourced from metadata within the court's WebEx system, exposing names, email addresses, and job titles. The breach specifically impacted the Magistrates' Court and Children's Court divisions across several regional locations, including Bendigo, Castlemaine, Echuca, Kerang, Kyneton, Maryborough, Mildura, Ouyen, Robinvale, and Swan Hill.
Court Services Victoria (CSV) has stated that it cannot currently determine the exact number of individuals affected. A CSV spokesperson explained that "in many instances the data was incomplete, inaccurate, and complex," which has hindered the agency's ability to verify the total impact of the leak.
A Pattern of Vulnerability
This security failure is the latest in a series of cybersecurity lapses within the Victorian justice system. In 2024, the system was targeted by a ransomware attack suspected to have been carried out by Russian hackers. This follows a 2021 incident in which the Children's Court inadvertently posted sensitive case information online, suggesting a recurring struggle to secure digital judicial records.
Risks to Vulnerable Parties
The severity of this specific leak is amplified by the nature of the courts involved. The exposed metadata includes participants in children's court hearings and those seeking family violence intervention orders. In these legal contexts, confidentiality is not merely a preference but a legal mandate designed to protect the safety and anonymity of victims and minors. The public exposure of these identities on a hacking forum potentially undermines these legal protections and places individuals at direct risk.
Next Steps
While the scope of the metadata leak is known, the full extent of the damage remains unclear as CSV continues to analyze the fragmented data. Observers will be watching for how the Victorian government addresses the systemic vulnerabilities that have led to three major data incidents in five years, and whether new safeguards will be implemented for the WebEx systems used in regional courts.