The irrigation company discovered the security incident on December 18, 2025, when information ordinarily kept confidential was unintentionally made publicly available. Murray Irrigation immediately secured the platform upon discovery.
“We take the security and privacy of your information very seriously and want to explain what happened, what information was involved, and what steps you can take,” the company stated.
The breach involved several categories of landholder information including land registration numbers, landholding areas in hectares, chemical-free status, customer numbers, names, postal addresses, phone numbers and email addresses, water account balances, customer flags, and works supervisor names with accompanying phone numbers.
MIL emphasised that payment information, bank account details, passwords, WEX data or A-account information were not compromised. The breach was limited to landholding-related data and did not affect all customers.
“The incident was not a result of a malicious attack or attempt to access information by an external actor,” the company confirmed.
ArcGIS is a geographic information system platform used to create, manage, analyse and map location-based data.
MIL uses this system to support delivery of its core services, with landholder information not ordinarily visible publicly.
Following the discovery, MIL took immediate action to contain the breach, assess its scope and potential harm, and launch an investigation.
“We will complete a full external investigation to ensure Murray Irrigation does everything within its power to contain the incident and prevent this from occurring again,” it said.
Affected landholders have been notified, along with the Office of the Australian Information Commissioner and Privacy Commissioner.
The company recommends affected landholders remain vigilant for suspicious communications, verify invoice details including bank account information available at https://www.murrayirrigation.com.au/anz, avoid clicking unexpected links, and consider changing account passwords.
Landholders requiring assistance or clarification can contact MIL on 1300 138 265. The company will provide updates as more information becomes available.