Third party cyber security incident

    Published 26 April 2024
    City of Port Phillip has been made aware of a cyber security incident involving OracleCMS

    Update 8 May 2024

    Our work with OracleCMS and the Department of Premier and Cabinet has found that some City of Port Phillip customer Personal Identifiable Information has been compromised in the OracleCMS cyber security incident.

    The date of the data affected by the breach ranges from 2016 to 2017, and includes customer name, address, phone number and email.

    We are in the process of reviewing this data and contacting affected customers directly to advise them of the breach and provide tailored advice and support.

    If you are concerned about your data, or require any further assistance, please contact our team on Help.Dataincident@portphillip.vic.gov.au or call our customer service team on 03 9209 6777.

    Update 26 April 2024

    We are still working closely with OracleCMS and relevant agencies to investigate the data breach and understand what, if any, information has been impacted.

    Our systems were not compromised by the attack on Oracle CMS. OracleCMS provided confirmation to City of Port Phillip that no customer Personal Identifiable Information has been compromised.

    As the investigation continues, if we identify that the information of residents has been impacted, we will make direct contact to affected individuals immediately and provide tailored advice and support.

    We know data breaches can be distressing. We recommend that you stay updated on developments of the investigation on this website.

    The Australian Cyber Security Centre has a list of resources providing guidance on steps you can take to keep yourself cyber safe Protect yourself - Cyber.gov.au.

    Original statement 22 April 2024

    City of Port Phillip has been made aware of a cyber security incident involving OracleCMS, the contractor who manage customer calls to Council out of hours.

    Unfortunately, an unauthorised third party has gained access to a portion of OracleCMS data and published files online. Oracle CMS is working with government authorities and a cyber security expert to secure their systems and investigate the incident.

    City of Port Phillip systems have not been compromised and OracleCMS have confirmed that no City of Port Phillip customer details have been accessed.

    We take the privacy of our customers very seriously and are working closely with Oracle CMS to investigate what has occurred.

    If our customers are impacted, we will take every step possible to ensure that customers are notified.

    If you have any concerns about this incident, please speak to our customer service team on 03 9209 6777.