Three Queensland government entities have been found to be vulnerable to cyber attacks and international espionage.
Consultants who tested their security were able to breach the systems and access sensitive or non-public data.
They were doing so as part of a government audit of three unidentified entities that found all were at risk of falling victim to cyber attacks.
A Managing Cyber Security Risks report tabled in state parliament on Tuesday said none of the three entities could demonstrate an understanding of the extent to which they were exposed to cyber security risks.
Vulnerabilities included outdated technology, simplistic passwords, insecure encryption channels and in some cases, direct physical access to the systems.
"In particular, we found poor password practices unnecessarily exposed the three entities to attack," the report says.
It recommended the entities make sure their users were aware of their own responsibilities in managing cyber risks.
"Third-party providers and internal staff could be the weak links in an entity's line of defence."
The report warned there could be "organised, targeted, deceptive cyber attacks" intended to compromise Australia's economic interest, and national security.
It identified four distinct threats, including:
* hacktivists--who target computer networks to advance their political or social causes
* criminals--including individuals and sophisticated criminal groups who steal personal information and extort victims for financial gain
* insiders--who steal information for personal, financial, or ideological reasons
* nation-states--which target systems to steal sensitive state secrets for economic and political advantage.
The report's findings come as it was revealed surgeries and outpatient care were delayed in Victoria after regional hospital computer networks across the state were hacked in a ransomware attack.
The Queensland government has earmarked more than $85 million in its 2019-20 state budget to improve digital services and safeguard government systems over the next four years.
Australian Associated Press
Gloss