Summary
- Environment: Australian court transcription work pools
- Operational impact: Recordings from 93 court matters accessed outside approved arrangements
- Financial impact: No incident cost disclosed
- Record status: Developing record. Reviewed November 4, 2026; updated as evidence emerges.
What happened
The Office of the Australian Information Commissioner (OAIC) found that a permission error gave an overseas subcontractor access to Australian court recordings held by VIQ Solutions Pty Ltd. [1]
Impact
Five India-based subcontractor employees received access; three used it for transcription. The OAIC identified snippets from 93 court matters, including two ceremonial sittings, rather than 93 affected people. [1]
Timeline
Last recorded access
Last recorded access, according to the published account. Inquiry report.
[1]Access revoked
Access revoked, according to the published account. Inquiry report.
[1]OAIC publishes inquiry findings
OAIC publishes inquiry findings, according to the published account. Inquiry report.
[1]Briefing updated
This briefing was last reviewed and updated on November 4, 2026.
Threat Group & Attack Vector
VIQ’s parent inadvertently added subcontractor staff to Australian work pools, granting access from September 2025 until February 11, 2026. The OAIC characterized this as unauthorized access within VIQ’s systems, not release of the files to foreign actors. [1]
Actors
- The disclosure attributes this incident to an error; it does not identify a threat actor group.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
Access was revoked on February 11, 2026, after the last recorded use on February 6. The OAIC closed preliminary inquiries without further action, citing the narrower scope, court responses and VIQ’s liquidation. Its report did not make concluded findings of legal liability. [1]