Incident identified
28 April 2023
Date HWL Ebsworth became aware of the cyber incident.
Official matter websites: HWLEDataBreach.com.au and HWLEClassAction.com.au
HWLE Data Breach
Public information and registration
Investigation open
HWL Ebsworth Data Breach Investigation
Centennial Lawyers is investigating the impact of the 2023 HWL Ebsworth cyber incident on individuals, employees, clients, government agencies, businesses and other organisations whose information may have been held by the firm.
Only an email address is requested. You do not need to provide your name, documents or details about your circumstances to receive updates.
Reported data volume
Approx. 4 TB
Reported as approximately 2.2 million files.
OAIC notification
8 May 2023
Reported under the Notifiable Data Breaches scheme.
Current page status
Investigation open
Registrations are being accepted from individuals and organisations.
Official communication channels
Use the website forms for all registrations and enquiries
This keeps communications linked to the correct matter record. Official email communications may be sent from contact@hwledatabreach.com.au.
Fraud and document warning
We will not ask by unsolicited email for passwords, banking credentials or identity document copies. Do not email sensitive documents unless requested through an authorised portal communication.
Why you may be affected
You may never have dealt directly with HWL Ebsworth
HWL Ebsworth provided legal services to government departments, insurers, businesses and other organisations. Information about an individual may therefore have appeared in a legal file even where that person was not a direct client of the firm.
Information may have been supplied by an employer, insurer, government agency, service provider, opposing party or another organisation connected with a legal matter.
Incident chronology
Verified public timeline
The timeline separates public facts from matters that remain under investigation.
-
28 April 2023HWL Ebsworth / Australian Government
Cyber incident identified
HWL Ebsworth became aware that a cyber-crime threat actor had claimed to have exfiltrated data from the firm.
-
8 May 2023OAIC
OAIC notified
HWL Ebsworth notified the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
-
June 2023HWL Ebsworth / OAIC
Data publication and preliminary inquiries
Some exfiltrated data was reportedly published for a period, and the OAIC commenced preliminary inquiries.
-
21 February 2024OAIC
OAIC formal investigation commenced
The OAIC commenced an investigation into the security and protection of personal information held by HWL Ebsworth and notification to affected individuals.
-
30 July 2025NDIA
Further NDIS-related update
The NDIA published a further update concerning certain participants, prospective participants, families, carers and staff connected with legal matters handled by HWL Ebsworth.
-
CurrentCentennial Lawyers
Centennial Lawyers investigation and registration
Centennial Lawyers is accepting registrations from individuals and organisations that may have been affected.
Information involved
What types of information may have been affected?
The precise information differs between people and organisations. Registration for updates does not require you to identify the affected data now.
Identity & Contact
- • Names
- • Addresses
- • Dates of birth
- • Email addresses
- • Phone numbers
Health & Disability
- • Medical information
- • NDIS-related information
- • Insurance and compensation records
Employment & Government
- Employment records
- Government records
- Legal and regulatory material
Commercial & Legal
- Contracts
- Legal correspondence
- Client files
- Project and corporate information
Individuals
People who may be affected
- Current or former employees
- Government employees and contractors
- NDIS participants, prospective participants, family members and carers
- Insurance or compensation claimants
- Witnesses, counterparties or people named in legal files
- People notified by an employer, government agency, insurer or other organisation
Businesses and organisations
Organisations that may be affected
- Government agencies
- Insurers and financial institutions
- Corporate and professional clients
- Suppliers and contractors
- Employers whose staff information may have been involved
- Organisations whose customer, project or confidential information was held by the firm
About this investigation
The official HWL Ebsworth data breach investigation site
In 2023 the national law firm HWL Ebsworth was the subject of a significant cyber incident in which a large volume of data held by the firm was accessed and released. Centennial Lawyers is investigating the impact of that incident on individuals and organisations whose information may have been held by HWL Ebsworth.
This site — hwledatabreach.com.au — is the official, canonical place to register your interest and receive updates. The companion domain hwleclassaction.com.au redirects to this site. Please register only here so your details stay linked to the correct matter record.
Who should register
You can register if you believe you may be affected
- Current or former clients of HWL Ebsworth
- Individuals whose information was held in the firm’s files
- Employees, contractors and suppliers
- Government agencies, insurers and businesses that engaged the firm
- Anyone notified that their information may have been involved
If you are unsure whether you are affected, you may still register to receive updates.
How registration works
A simple three-step process
- Complete the short registration form on this page with your first name and email address.
- Receive a confirmation from Centennial Lawyers at contact@hwledatabreach.com.au.
- Receive updates about the investigation as it progresses. No further information is required at this stage.
Information required
Only what is needed to keep you informed
- Your first name
- Your email address
- Whether you are registering as an individual or a business or organisation
- Whether you believe you have been impacted by the data breach
You do not need to provide your address, documents, or details of your circumstances to register for updates.
What happens after you register
You stay informed, on your terms
After you register, Centennial Lawyers will keep you updated on the progress of the investigation. Registration records your interest and lets us contact you — it does not create a solicitor–client relationship, confirm eligibility, or commit you to any course of action.
If information or documents are needed from you at a later stage, a secure method will be provided. You can ask to stop receiving updates at any time.
Security & official correspondence
How to recognise genuine messages
- Official email correspondence is sent from contact@hwledatabreach.com.au.
- We will not ask by unsolicited email for passwords, banking details, or copies of your identity documents.
- Register only through this site — hwledatabreach.com.au — or the companion domain that redirects here.
- If a message seems suspicious, do not reply to it. Contact us at the official email address instead.
About Centennial Lawyers
The firm conducting this investigation
Centennial Lawyers (CENTENNIAL LAWYERS PTY LTD, ABN 54 653 103 818, ACN 653 103 818) is conducting the HWL Ebsworth Data Breach Investigation. George Newhouse is the Principal Solicitor. You can contact the firm about this matter at contact@hwledatabreach.com.au.
Liability limited by a scheme approved under the Professional Standards Legislation.
Minimal registration*
Receive updates about this investigation
Provide your first name and email address. You can receive updates without providing your circumstances or documents.
*We deliberately collect as little as possible to protect your privacy.
Frequently asked questions
Answers to common questions
Is this the official registration site?
Yes. hwledatabreach.com.au is the official registration site for the HWL Ebsworth Data Breach Investigation conducted by Centennial Lawyers. hwleclassaction.com.au is a secondary companion domain that redirects here. Registrations should be made only through this site.
Who is conducting the investigation?
The investigation is being conducted by Centennial Lawyers (CENTENNIAL LAWYERS PTY LTD, ABN 54 653 103 818, ACN 653 103 818). George Newhouse is the Principal Solicitor.
Is there a cost to register?
No. Registration is free. You are only asked for your first name and email address so that Centennial Lawyers can send you updates about the investigation.
What information is required to register?
Your first name and email address, whether you are registering as an individual or a business or organisation, and whether you believe you have been impacted. You do not need to provide your address, documents or details of your circumstances to register for updates.
What happens after I register?
You will receive a confirmation and then updates about the investigation as it progresses. At this stage no further personal information is required from you. If information or documents are needed later, a secure method will be provided.
Will I need to provide documents now?
No. No documents are requested at the registration stage. Centennial Lawyers will not ask you to email sensitive documents. If documents are required later, a secure portal will be provided for you to submit them.
Does registration guarantee that Centennial Lawyers will act for me?
No. Registration does not create a solicitor–client relationship, confirm eligibility, or guarantee that Centennial Lawyers will act for you. It records your interest and lets you receive updates about the investigation.
How can I verify that an email is genuine?
Official email correspondence for this matter is sent from contact@hwledatabreach.com.au. We will not ask by unsolicited email for passwords, banking details or copies of identity documents. If in doubt, do not reply to a suspicious message — contact us at the official address instead.
What is the official contact email?
The official contact email for the HWL Ebsworth Data Breach Investigation is contact@hwledatabreach.com.au.
HWLEDataBreach.com.au
Information and registration
The primary public hub for the breach timeline, affected groups, updates and minimal registration.
HWLEClassAction.com.au
Legal proceeding information
The companion site for legal-pathway updates, proceeding status and class-action information when available.