<!--The Official Report of Parliamentary Debates (Hansard) of the Legislative Council and the House of Assembly of the Parliament of South Australia are covered by parliamentary privilege. Republication by others is not afforded the same protection and may result in exposure to legal liability if the material is defamatory. You may copy and make use of excerpts of proceedings where (1) you attribute the Parliament as the source, (2) you assume the risk of liability if the manner of your use is defamatory, (3) you do not use the material for the purpose of advertising, satire or ridicule, or to misrepresent members of Parliament, and (4) your use of the extracts is fair, accurate and not misleading. Copyright in the Official Report of Parliamentary Debates is held by the Attorney-General of South Australia.-->
<hansard id="" tocId="" xml:lang="EN-AU" schemaVersion="4.0" xsi:noNamespaceSchemaLocation="hansard_1_0.xsd" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2007/XMLSchema-instance" xmlns:mml="http://www.w3.org/1998/Math/MathML">
  <name>House of Assembly</name>
  <date date="2023-10-18T10:30:00+10:30" />
  <sessionName>Fifty-Fifth Parliament, First Session (55-1)</sessionName>
  <parliamentNum>55</parliamentNum>
  <sessionNum>1</sessionNum>
  <parliamentName>Parliament of South Australia</parliamentName>
  <house>House of Assembly</house>
  <venue></venue>
  <reviewStage>published</reviewStage>
  <startPage num="5669" />
  <endPage num="5784" />
  <dateModified time="2024-07-24T15:38:45+09:30" />
  <proceeding continued="true">
    <name>Question Time</name>
    <subject>
      <name>Super SA Cybersecurity Incident</name>
      <page num="5697" />
      <text id="202310184309e30eb94c47d3a0000419">
        <heading>Super SA Cybersecurity Incident</heading>
      </text>
      <talker role="member" id="5377" referenceid="84fdb62c8e6644ce93a7ff01f8e92c3d" kind="question">
        <name>Mr COWDREY</name>
        <house>House of Assembly</house>
        <electorate id="">Colton</electorate>
        <questions>
          <question date="2023-10-18T00:00:00+10:30">
            <name>Super SA Cybersecurity Incident</name>
          </question>
        </questions>
        <startTime time="2023-10-18T14:13:31+10:30" />
        <text id="202310184309e30eb94c47d3a0000420">
          <timeStamp time="2023-10-18T14:13:31+10:30" />
          <by role="member" id="5377" referenceid="84fdb62c8e6644ce93a7ff01f8e92c3d">Mr COWDREY (Colton) (14:13):</by>  My question is to the Treasurer. When did the cybersecurity incident occur, when was the Treasurer informed and when were impacted individuals informed?</text>
      </talker>
      <talker role="member" id="4842" referenceid="78a22826e43d4639bdfa63b5f3ef73f9" kind="answer">
        <name>The Hon. S.C. MULLIGHAN</name>
        <house>House of Assembly</house>
        <electorate id="">Lee</electorate>
        <portfolios>
          <portfolio id="">
            <name>Treasurer</name>
          </portfolio>
          <portfolio id="">
            <name>Minister for Defence and Space Industries</name>
          </portfolio>
        </portfolios>
        <questions>
          <question date="2023-10-18T00:00:00+10:30">
            <name>Super SA Cybersecurity Incident</name>
          </question>
        </questions>
        <startTime time="2023-10-18T14:13:43+10:30" />
        <text id="202310184309e30eb94c47d3a0000421">
          <timeStamp time="2023-10-18T14:13:43+10:30" />
          <by role="member" id="4842" referenceid="78a22826e43d4639bdfa63b5f3ef73f9">The Hon. S.C. MULLIGHAN (Lee—Treasurer) (14:13):</by>  I will take some of the detail of this on notice but, to the best of my recollection now, the cybersecurity breach I think happened nearly two months ago. As far as I am aware—and, again, I will check all these dates and provide them to the house—I think I was advised late last week. Treasury is not the lead agency for cybersecurity management in government but, regardless, as a minister responsible for a government agency that had its data potentially breached to not be told for that length of time is, quite frankly, unacceptable. I find it unacceptable to me, but that's in my capacity as a minister responsible to this house for the affairs of that agency. More to the point, it's unacceptable to the people who have had their information accessed or information breached, or who have had their livelihoods impacted.</text>
        <text id="202310184309e30eb94c47d3a0000422">I am sorry if I seem agitated or frustrated, if not angry about this episode, but, as I said, this is not the first time it has happened in this state, it is not the first time it has happened to public sector agencies, and it is clear to me as a minister that government agencies still are not responding to this in a way which is appropriately timely, thorough and meeting the needs of people who may have had their data accessed.</text>
      </talker>
    </subject>
  </proceeding>
</hansard>