What Happened
In early 2026, a threat actor using the handle “2019” claimed to have breached systems associated with the Australian Centre for the Moving Image (ACMI) at acmi.wa.edu.au, posting what they said was data on more than 25,000 ACMI customers to a hacking forum. The leaked information was reportedly spread across three datasets and allegedly included full names, email addresses, gender, dates of birth, sign‑in data, invoicing and pricing details, and IP addresses, i.e., a broad set of personally identifiable information rather than payment card data. According to reporting, ticketing provider Ferve (a third‑party service used by ACMI) confirmed it was investigating the incident with cybersecurity specialists and authorities to determine the full scope and impact of the breach, suggesting the compromise may have involved a vendor system rather than ACMI’s core infrastructure.
