We wish to inform you of a recent cyber security incident impacting Downies Collectables (Downies).
We have responded, and continue to respond, to this incident with the assistance of our forensic experts and cybersecurity advisors with the utmost urgency.
Relevant Australian Government agencies have been notified, and we continue to cooperate with officials to respond to this criminal activity.
We understand this may cause concern to our community, and we want to provide you with as much information as we can about the current situation.
Being a victim of reprehensible conduct by a cyber-criminal organisation has been challenging, and we greatly appreciate the support of our community at this time.
What has happened?
On Monday, 6 July 2026, we identified suspicious activity within our IT network and immediately commenced an investigation, which remains on foot.
Based on investigations to date, we understand that data stored within our IT system was accessed and removed without authorisation by a malicious cyber-criminal.
We recently became aware that certain information is referred to within a breach listing on a dark-web leak site of a cyber-criminal organisation, which is part of the continuing investigation efforts.
We implore you not to look for data illegally leaked, as doing so only encourages further such criminal activity and may further the potential harm to Australians possibly impacted.
What are we doing about the incident?
We are taking this incident very seriously and continue to respond accordingly.
We quickly worked to contain the incident and prevent any further access by the malicious cyber-criminal to our IT environment.
We are urgently working with our forensics experts and cybersecurity advisors to undertake a comprehensive investigation of the incident and any data stolen by the criminal organisation.
We are also working with relevant Australian Government agencies in response to this incident, including the Australian Signals Directorate, the Australian Federal Police and Victoria Police.
This incident has also been reported to the Office of the Australian information Commissioner, and we will be directly notifying individuals impacted by this incident.
We are committed to communicating with you transparently with any information that is relevant to you.
What can you do?
While our investigation continues, how this incident may have impacted any individuals is still being ascertained on an urgent basis.
The breach listing allegedly contains personal and sensitive information. Should we identify personal information that is relevant to you, we will communicate with you directly and provide further updates to you specifically.
We have no evidence of any personal information being misused by the malicious cyber-criminal or any other unknown third-party at this stage.
Nonetheless, you should always be vigilant when it comes to your personal information by taking the following precautionary steps:
1. Monitor your accounts: Regularly check your financial and online accounts for unusual activity.
2. Be vigilant for scams: Be cautious of unexpected emails, texts, or calls. Do not click on suspicious links or share personal information.
3. Reset your passwords: Use strong, unique passwords for each account. Avoid reusing passwords across services.
4. Enable Multi-Factor Authentication (MFA): MFA adds an extra layer of security and should be enabled wherever possible.
5. Visit IDCARE: For personalised support and further guidance, visit https://www.idcare.org/.
7. Report suspicious or threatening behaviour immediately: If you believe you are being targeted or harassed as a result of this incident, or if you feel your safety may be at risk, contact Triple Zero (000) immediately for emergency assistance. For non-urgent matters, you may also contact your local police station or report cybercrime via https://www.cyber.gov.au/report.
8. Australian Taxation Office can apply protective measures to your Tax File Number: These measures aim to detect fraudulent activity. There is nothing further you need to do; however, if you have any concerns, you may wish to contact the ATO’s specialist Client Identity Support Centre on 1800 467 033. More information is available at https://www.ato.gov.au/.
More information and further updates If you would like any further information relating to this incident at this stage, please email enquiries@downies.com and we will respond as soon as we can.
We are committed to communicating as transparently as we can, and will provide further updates at www.downies.com as more information becomes available.
Thank you for your understanding and support at this time.
