Update: The Akira ransomware group has claimed responsibility for a significant data breach at Intellect Systems, a Perth-based operational technology (OT) firm. The threat actors, who listed the company on their dark web leak site, allege to have exfiltrated 10GB of highly sensitive data. The stolen information reportedly includes employee passports, driver's licences, medical records, and financial details, alongside corporate contracts and project information.
This incident is part of a broader campaign by Akira, which has been actively exploiting a year-old vulnerability in SonicWall SSL VPN devices (CVE-2024-40766) to target Australian organisations. The Australian Cyber Security Centre (ACSC) issued a high-priority alert on 10th September 2025, warning of this specific threat and urging businesses to patch vulnerable systems and reset credentials. Intellect Systems has not yet publicly commented on the alleged breach.
Why it Matters: The attack on Intellect Systems is a stark reminder of the vulnerability of the operational technology sector, which underpins critical infrastructure. OT environments, which manage physical processes in industries like energy and manufacturing, are increasingly targeted by ransomware groups. A successful breach in this sector can lead not only to data theft but also to the disruption of essential services.
The incident demonstrates how threat actors can exploit known vulnerabilities in widely used network hardware to penetrate otherwise secure perimeters. For Australian businesses, it highlights the critical importance of timely patching, robust credential management, and a comprehensive understanding of supply chain risks.