Mandurah State Emergency Service has confirmed the incident to Cyber Daily (14 October). A spokesman said the WA Office of Digital Government's Cyber Security Operations Centre (WASOC) notified it on 5 October of a cyber security incident involving unauthorised access to one of its servers. That server held only historical records from before 2022, and there is no evidence any other systems were affected. Operations continue as normal.

The unit says it is aware further data was published online as of 13 October. Per Cyber Daily, the leak includes several zip files of compressed backups and a backup folder of historical operations and planning data. Mandurah SES is contacting past and present members who are affected and, with DGov's guidance, advising them on how to protect their personal information. DFES is supporting the unit, and the WASOC-supported investigation into the extent of the incident is ongoing.

Mandurah SES, a DFES volunteer SES unit in Western Australia, was listed on The Gentlemen ransomware gang's leak site, according to Cyber Daily. The Gentlemen emerged in September 2025 and, per Cyber Daily, is now second only to Qilin by victim count; Cyber Daily says its most recent Australian victim was All Souls St Gabriels School in Charters Towers.

Primary: Cyber Daily (unit statement).

Correction (25 Oct 2026): removed leak-site tracker links and the listing and attack dates they gave; the listing is now credited to Cyber Daily.

The card date has moved from 2 to 14 October 2026, the Perth date of Cyber Daily's report (13 October 23:52 UTC, 14 October 07:52 Perth time (AWST)). (source: Cyber Daily)