Breach right now?

Data breach and cyber help for Melbourne businesses

Melbourne businesses follow the national rules: report cyber incidents to the ACSC and notify eligible data breaches to the OAIC. Victorian public sector bodies have an extra step: they should notify OVIC of qualifying information security incidents within 30 days. (OVIC)

Who we are: Breach Response is a collective of experienced web and application developers based in Melbourne. We publish free security content and guides, free to use and share, to help Melbourne businesses stay safe. Want a local developer to look over your setup? Book a review or get breach alerts.

Last reviewed 2026-11-03. General information only, not legal advice.

Who do I contact in Victoria?

OVIC notes that public sector bodies needing response help can seek support from their own security resources, their parent entity, and the Victorian Government's Cyber Incident Response Service for cyber incidents. (OVIC)

What should I do first?

Follow the OAIC's contain, assess, notify, review steps in our data breach first steps. Our developers are based in Melbourne; to talk to us, request a review call.

FAQ

Who should a Victorian public sector body notify about an information security incident?

Victorian public sector organisations subject to the Victorian Protective Data Security Standards should notify the Office of the Victorian Information Commissioner (OVIC) of incidents affecting public sector information with a business impact level of 2 (limited) or higher, as soon as practical and no later than 30 days after the incident is identified. Source

Where does a Melbourne business report a cyber attack?

Businesses anywhere in Australia, including Melbourne, can report cybercrime and cyber incidents to the Australian Cyber Security Centre at cyber.gov.au or on 1300 CYBER1 (1300 292 371). Call 000 if a crime is in progress or someone is in danger. Source