A significant data breach has compromised the personal information of employees and associates linked to Clive Palmer’s business and political entities, including Mineralogy and Queensland Nickel Group. The breach, identified on June 23, 2025, involved a ransomware cyber-attack that affected 11 entities associated with Palmer.
Affected Entities
The data breach impacted the following entities:
- Mineralogy
- Queensland Nickel Group
- Waratah Coal Pty Ltd
- Central Queensland Coal
- Gladstone Pacific Nickel Limited
- Palmer Coolum Resort
- Blue Star Line
- Palmer Motorama
- Ausface
- Drewmaster Pty Ltd
- Zeph Group
The breach has potentially exposed sensitive personal information, including email addresses, phone numbers, identity records, banking details, employment history, and confidential documents.
Expert Analysis
Monash University cybersecurity expert Professor Nigel Phair expressed concerns over the breach, stating that individuals affected may not be aware of the extent of the compromise. He emphasized the challenges in controlling the dissemination of personal data once it has been exposed.
Legal and Regulatory Response
The Office of the Australian Information Commissioner (OAIC) and the Australian Signals Directorate have been notified of the breach. While the Australian Federal Police have not received a formal report, experts are calling for stricter enforcement of cybersecurity laws and more significant penalties for organizations failing to protect personal data.
