Australia's PM says the country's parliament and three largest political parties have been hacked by a “sophisticated state actor” ahead of a federal election
Sydney Morning Herald :
Context & Ripple Effects
On the eve of a federal election, Prime Minister Scott Morrison disclosed that Australia's parliament network and the three largest political parties had been breached by what he called a "sophisticated state actor" — an intrusion disclosed only weeks before voters went to the polls. The disclosure opened a multi-year arc: within months, sources reported Australia had concluded China was responsible for the parliamentary hack, and by 2021 experts had traced most cyberattacks reverberating across the Australian economy to China-linked groups.
First-order effects
- Parliament's IT network was shut down and rebuilt while the three major parties scrubbed compromises on their own systems mid-campaign, putting election infrastructure integrity at the center of the political contest itself.
Second-order effects
- The eventual attribution to China turned a security incident into a diplomatic liability, pushing Canberra toward the collective posture it later took when it joined the US, UK, and Japan in publicly accusing a Chinese state-backed hacking group in 2024.
Third-order effects
- State hacking has become a standing cost line for Australia rather than a one-off event: spy chief Mike Burgess reported Chinese state hackers probing telecoms and critical infrastructure, with espionage costing the country roughly $8.1B in 2024, alongside new tools like the cyber sanctions regime first used against the Medibank hacker.
The trend: Australia's experience tracks a broader shift from quiet state-sponsored intrusions into openly attributed, alliance-coordinated confrontation over cyber operations targeting governments and critical infrastructure.