Legal supplier records Third-party data breach
HWL Ebsworth: legal files carried health and disability information
- Incident
- April 2023
- Source report
What was reported
The NDIA’s July 2025 update concerns an April 2023 incident at HWL Ebsworth, not a new breach. It describes unauthorized access to information held for legal matters involving participants, applicants, families, carers and staff. Disclosed data included health and disability information, medical reports and bank details.
Our perspective
Our reading: A legal file can combine many kinds of information about many people. Selecting only necessary context matters before sharing a matter with another service or AI tool.
Try Vivendur in actionLimits of this connection
The NDIA notice describes affected information, not a complete technical cause. It does not establish that selective AI context would have stopped the supplier’s compromise.