Federal Court Data Breach Exposes Sensitive Litigant Files in Offshore Security Failure A significant data breach involving Australian court records has exposed the personal and sensitive information of litigants in at least 146 cases, prompting a formal complaint to Canada’s privacy commissioner. The breach, linked to transcription service provider VIQ Solutions, has raised national security concerns after it was revealed that highly confidential court files were accessed offshore likely in India in violation of Commonwealth contractual obligations and privacy laws. The incident came to light following an ABC investigation in February, which uncovered that VIQ had subcontracted work to e24 Technologies, a Chennai-based firm specializing in automated transcription, without notifying the courts. The breach was first publicly acknowledged by VIQ in a March 16 press release, after the company entered voluntary administration under McGrathNicol, just weeks after the offshore access was exposed. ### Scope and Impact of the Breach - Affected Cases: At least 136 Family Court matters and 10 Federal Court cases were transcribed offshore without authorization. The total number of impacted cases across other jurisdictions including Queensland, New South Wales, Victoria, Western Australia, and the South Australian Employment Tribunal remains unclear. - Unverified Claims: Federal Circuit and Family Court CEO David Pringle told Senate estimates that VIQ had provided inconsistent figures, initially citing 170 affected files before revising the number to 136. However, the courts have been unable to verify these claims, as VIQ has repeatedly failed to provide detailed reports despite multiple requests. - Lack of Notification: None of the affected litigants have been informed of the breach, with Pringle stating that disclosure could cause "distress" a decision criticized by Greens Senator David Shoebridge, who called the handling of the incident an "unravelling scandal." ### Contractual Failures and Financial Irregularities Despite the breach and VIQ’s administration, the Federal Court quietly extended its contract with the company by $5.3 million, with the amendment only appearing on the Australian Tenders website on June 24 nearly two years after the original contract expired. Federal Court representative Cara Lawson described the oversight as an "administrative error", admitting that the tender listing had incorrect details, including the wrong start date, supplier name, and contract amount. Senator Shoebridge condemned the lack of transparency, particularly after the court awarded a separate $451,000 contract to Nous Group for transcription program management also listed just before the estimates hearing. He questioned the court’s competence in managing the crisis, stating that officials had failed to ask "the right questions" as the privatization of transcription services collapsed. ### Breakdown in Oversight and Response - Communication Failures: Pringle revealed that VIQ’s Canadian parent company cut off its Australian arm without warning, leaving courts scrambling to maintain services. The company also threatened to withdraw support, forcing emergency contingency measures. - Government Involvement: The Attorney-General’s Department confirmed it had notified the Australian Cyber Security Centre (ACSC) upon learning of the breach. - Ongoing Issues: Legal practitioners had previously raised concerns about erroneous transcripts, missing dialogue, and delays problems that have persisted amid VIQ’s administration. The breach underscores systemic vulnerabilities in the outsourcing of sensitive judicial services, with critics arguing that privatization has outpaced oversight. As the fallout continues, the full extent of the exposure and the long-term consequences for affected litigants remains unresolved.

Australian Court Transcripts Exposed in Offshore Data Breach, Raising National Security Concerns A major breach of sensitive Australian court files has been uncovered, revealing that foreign actors accessed highly confidential legal transcripts in violation of federal law and Commonwealth contractual obligations. The incident, exposed by an ABC investigation, involves VIQ Solutions, a Canada-based company responsible for transcribing court cases across most Australian jurisdictions. ### Key Details of the Breach - Who: VIQ Solutions, which holds contracts with federal and state courts, subcontracted work to e24 Technologies, a Chennai, India-based firm specializing in automated voice-to-text technology without notifying the courts or complying with contractual restrictions. - What: Thousands of court files, including those involving domestic violence, child abuse, migration cases, and national security matters, were accessed by e24 staff with Indian email addresses. Internal VIQ documents confirmed the offshore access, while a job ad for e24 sought transcribers proficient in "Australian English" for remote legal transcription work. - When: Concerns were raised by VIQ’s Australian staff as early as August 2025, but management dismissed them as "rumours" and claimed e24 resources were based in Sydney. The breach appears to have persisted for months, with e24 staff working outside Australian business hours and producing transcripts at speeds suggesting automated or AI-assisted processing later found to contain significant errors. - Why: VIQ’s subcontracting violated its Commonwealth contract, which prohibits offshoring court data or using AI-based transcription. The Federal Court of Australia, which manages the contract, was unaware of e24’s involvement until the ABC investigation. ### National Security and Privacy Risks The breach has raised alarm over potential exposure of classified information, including: - ASIO and AFP intelligence shared in closed court proceedings, which could reveal links to international criminal organizations or foreign interference. - Identities of undercover operatives, protected witnesses, and covert police, risking retaliation or black-market exploitation. - Locations of protected persons, such as domestic violence survivors, which were allegedly left in transcripts sent to respondents a criminal offense under Australian law. Greens senator David Shoebridge called the offshore access a "national security risk", stating that sensitive data in the wrong hands could cause "incredible damage" to Australia’s interests. He has demanded an independent audit and the termination of VIQ’s contract, criticizing the Federal Court’s "set and forget" approach to oversight. ### Internal Fallout and Whistleblower Accounts - Staff concerns ignored: Australian VIQ employees and contractors reported the offshore access months ago but were told to stop "spreading rumours." A memo from VIQ management falsely claimed e24 resources were Sydney-based. - Retaliation fears: At least a dozen senior VIQ staff, including the Quality and Assurance team, were made redundant or resigned since July 2023. Whistleblowers described a culture of fear, with team leaders fired for questioning decisions and contractors forced to perform unpaid quality checks on flawed e24 transcripts. - Security gaps: While VIQ’s Australian staff undergo national security checks and sign confidentiality deeds, it remains unclear what vetting if any e24 employees underwent. ### Official Responses - VIQ Solutions: CEO Larry Taylor stated that contractors like e24 are required to adhere to the same privacy and confidentiality standards as VIQ employees, with all data stored in Australia under the Privacy Act 1988. - Federal Court of Australia: Acknowledged that VIQ was prohibited from offshoring data or using AI but was unaware of e24’s involvement. The court is now investigating the compliance breach. - WA Department of Justice: Confirmed it is investigating claims that protected persons’ locations were exposed in transcripts. - Attorney-General’s Department: Stated that federal courts are responsible for their own operations. The incident has reignited debates over privatization of critical legal services, with Senator Shoebridge arguing the contract should be brought back into public hands to prevent future breaches. The Federal Court has yet to announce any disciplinary action against VIQ.