Poole Group (Sunshine Coast accountants, QLD) confirms a cyber incident after a LockBit leak-site listing — OAIC, ACSC and ATO notified (16 Oct statement)
Poole Group, a Sunshine Coast accounting and business advisory firm founded in 1980, was listed on the LockBit ransomware gang's leak site, according to Banking Daily (16 October).
On 16 October a company spokesperson told Banking Daily / Cyber Daily that Poole Group is responding to a cyber incident that affected part of its IT environment in recent days: it implemented containment measures, engaged external cyber security specialists, and notified the Office of the Australian Information Commissioner, the Australian Cyber Security Centre and the Australian Taxation Office.
The investigation into nature and scope is ongoing; the firm says it will contact individuals directly if it determines any were affected.
According to Banking Daily, the gang did not disclose what data it allegedly took or list a ransom value. Accounting firms hold tax file numbers, identity documents and financial records, so clients should watch for targeted phishing or invoice-redirection attempts.
Primary: Banking Daily company statement (16 Oct).
Correction (25 Oct 2026): removed a leak-site tracker link and the gang's publication countdown; the listing is now credited to Banking Daily. The card date has moved from 14 to 16 October 2026, the Perth date of Banking Daily's report (16 October 09:38 AEST, 07:38 Perth time (AWST)); the earlier date came from the tracker. (source: Banking Daily)
- Exploited in Australia?
- unknown
- Patch to
- Clients: verify any payment or bank-detail change by phone on a known number, and watch for tax-time and ATO-themed phishing. The firm says it will contact affected individuals directly if its investigation finds personal information was involved.
