<!--The Official Report of Parliamentary Debates (Hansard) of the Legislative Council and the House of Assembly of the Parliament of South Australia are covered by parliamentary privilege. Republication by others is not afforded the same protection and may result in exposure to legal liability if the material is defamatory. You may copy and make use of excerpts of proceedings where (1) you attribute the Parliament as the source, (2) you assume the risk of liability if the manner of your use is defamatory, (3) you do not use the material for the purpose of advertising, satire or ridicule, or to misrepresent members of Parliament, and (4) your use of the extracts is fair, accurate and not misleading. Copyright in the Official Report of Parliamentary Debates is held by the Attorney-General of South Australia.-->
<hansard id="" tocId="" xml:lang="EN-AU" schemaVersion="4.0" xsi:noNamespaceSchemaLocation="hansard_1_0.xsd" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2007/XMLSchema-instance" xmlns:mml="http://www.w3.org/1998/Math/MathML">
  <name>House of Assembly</name>
  <date date="2023-10-18T10:30:00+10:30" />
  <sessionName>Fifty-Fifth Parliament, First Session (55-1)</sessionName>
  <parliamentNum>55</parliamentNum>
  <sessionNum>1</sessionNum>
  <parliamentName>Parliament of South Australia</parliamentName>
  <house>House of Assembly</house>
  <venue></venue>
  <reviewStage>published</reviewStage>
  <startPage num="5669" />
  <endPage num="5784" />
  <dateModified time="2024-07-24T15:39:06+09:30" />
  <proceeding continued="true">
    <name>Question Time</name>
    <subject>
      <name>Super SA Cybersecurity Incident</name>
      <text id="20231018ed1060ad2add432290000509">
        <heading>Super SA Cybersecurity Incident</heading>
      </text>
      <talker role="member" id="5377" referenceid="84fdb62c8e6644ce93a7ff01f8e92c3d" kind="question">
        <name>Mr COWDREY</name>
        <house>House of Assembly</house>
        <electorate id="">Colton</electorate>
        <questions>
          <question date="2023-10-18T00:00:00+10:30">
            <name>Super SA Cybersecurity Incident</name>
          </question>
        </questions>
        <startTime time="2023-10-18T14:38:31+10:30" />
        <text id="20231018ed1060ad2add432290000510">
          <timeStamp time="2023-10-18T14:38:31+10:30" />
          <by role="member" id="5377" referenceid="84fdb62c8e6644ce93a7ff01f8e92c3d">Mr COWDREY (Colton) (14:38):</by>  My question is again to the Treasurer. Why has the Treasurer not made a public announcement about the cyber incident? With your leave, sir, and that of the house, I will explain.</text>
        <text id="20231018ed1060ad2add432290000511">Leave granted.</text>
      </talker>
      <talker role="member" id="5377" referenceid="84fdb62c8e6644ce93a7ff01f8e92c3d" kind="question" continued="true">
        <name>Mr COWDREY</name>
        <house>House of Assembly</house>
        <electorate id="">Colton</electorate>
        <text id="20231018ed1060ad2add432290000512">
          <by role="member" id="5377" referenceid="84fdb62c8e6644ce93a7ff01f8e92c3d">Mr COWDREY:</by>  In 2021, after a three-day delay, the now Treasurer issued a press release, stating: 'Steven Marshall needs to explain why he kept a major cyber attack against the South Australian government secret.'</text>
        <text id="20231018ed1060ad2add432290000513">
          <event kind="interjection">Members interjecting:</event>
        </text>
      </talker>
      <talker kind="speech" role="office">
        <name>The Speaker</name>
        <house>House of Assembly</house>
        <text id="20231018ed1060ad2add432290000514">
          <by role="office">The SPEAKER:</by>  Order! The Treasurer has the call.</text>
      </talker>
      <talker role="member" id="4842" referenceid="78a22826e43d4639bdfa63b5f3ef73f9" kind="answer">
        <name>The Hon. S.C. MULLIGHAN</name>
        <house>House of Assembly</house>
        <electorate id="">Lee</electorate>
        <portfolios>
          <portfolio id="">
            <name>Treasurer</name>
          </portfolio>
          <portfolio id="">
            <name>Minister for Defence and Space Industries</name>
          </portfolio>
        </portfolios>
        <startTime time="2023-10-18T14:38:57+10:30" />
        <text id="20231018ed1060ad2add432290000515">
          <timeStamp time="2023-10-18T14:38:57+10:30" />
          <by role="member" id="4842" referenceid="78a22826e43d4639bdfa63b5f3ef73f9">The Hon. S.C. MULLIGHAN (Lee—Treasurer) (14:38):</by>  As I explained to the member for Colton, as soon as I was advised I was demanding that my agency take what steps it—</text>
        <text id="20231018ed1060ad2add432290000516">
          <event kind="interjection">Members interjecting:</event>
        </text>
      </talker>
      <talker kind="speech" role="office">
        <name>The Speaker</name>
        <house>House of Assembly</house>
        <text id="20231018ed1060ad2add432290000517">
          <by role="office">The SPEAKER:</by>  Order! The member for Morialta is warned. The Treasurer has the call.</text>
      </talker>
      <talker role="member" id="4842" referenceid="78a22826e43d4639bdfa63b5f3ef73f9" kind="answer" continued="true">
        <name>The Hon. S.C. MULLIGHAN</name>
        <house>House of Assembly</house>
        <electorate id="">Lee</electorate>
        <portfolios>
          <portfolio id="">
            <name>Treasurer</name>
          </portfolio>
          <portfolio id="">
            <name>Minister for Defence and Space Industries</name>
          </portfolio>
        </portfolios>
        <page num="5703" />
        <text id="20231018ed1060ad2add432290000518">
          <by role="member" id="4842" referenceid="78a22826e43d4639bdfa63b5f3ef73f9">The Hon. S.C. MULLIGHAN:</by>  As I said, as soon as I was advised, I was demanding that my department was putting in place those steps to notify as soon as possible those people who were potentially impacted by this cybersecurity breach, and also that they were doing so so that they knew what the next steps were both for them, if they wanted to find out more information, if they wanted access to the IDCARE provider which again was used in the past in previous cybersecurity breaches, but also that the agency was able to articulate to people who were potentially impacted what steps that agency was taking in deference to that. My first thought was to make sure that information was provided as quickly as possible to those people who were impacted and I think that that is absolutely appropriate.</text>
        <text id="20231018ed1060ad2add432290000519">
          <event kind="interjection">Members interjecting:</event>
        </text>
      </talker>
      <talker kind="speech" role="office">
        <name>The Speaker</name>
        <house>House of Assembly</house>
        <text id="20231018ed1060ad2add432290000520">
          <by role="office">The SPEAKER:</by>  Order!</text>
      </talker>
    </subject>
  </proceeding>
</hansard>