Equestrian Australia Faces Legal Fallout Over Alleged Unauthorized Cyberattack Equestrian Australia, the governing body for Olympic equestrian disciplines, is embroiled in a legal dispute over a 2024 cybersecurity penetration test that allegedly exceeded agreed boundaries. Former digital services provider Lloyd Raleigh, whose company Nominate Pty Ltd managed the federation’s member database and horse registration portal for a decade, is suing both Equestrian Australia and Sydney-based cybersecurity firm Zirilio (operating as Allstars Trading Pty Ltd). The lawsuit stems from a January 2024 penetration test, during which Raleigh permitted Zirilio to bypass a firewall to assess system vulnerabilities. However, court documents allege the test went beyond its scope, with 19,131 unauthorized attacks targeting Raleigh’s server on URLs outside the agreed parameters. Raleigh claims the incident constituted a breach of contract and incurred $141,756.06 in forensic examination costs. Equestrian Australia has denied the allegations, stating it was unaware of any unauthorized access and did not approve Zirilio’s actions. The federation, which receives $6 million annually in federal high-performance funding, also disputed Raleigh’s need for external forensic analysis, calling some claims "vague and embarrassing." Zirilio has yet to file a defense, and Raleigh’s legal team has requested a default judgment against the firm. The legal battle adds to Equestrian Australia’s ongoing turmoil, which includes a board revolt, an Australian Sports Commission-ordered review led by integrity expert Iain Roy, and financial losses of $1.2 million over two years. Three directors, including former chairman Zac Miles, have already resigned, while three others Rhett Oliver, Stephanie Lyons, and Maggie Hundertmark face removal at a special general meeting on December 12, 2025. Oliver, a partner at law firm Colin Biggers & Paisley, is handling the federation’s legal response. The case highlights tensions between Equestrian Australia, its former IT provider, and the cybersecurity firm, amid broader governance and financial challenges in the sport.