Hazeldenes cyberattack disrupts Victorian chicken supplies; stolen personal information published
Hazeldenes’ February cyberattack disrupted Victorian chicken deliveries and exposed personal information. Regular production resumed by 30 March. There is no household software fix; anyone notified should follow the company’s advice.
There is no household software update to install for this breach. If Hazeldenes contacts you about exposed information, follow its specific advice and verify unexpected requests directly with the company. Questions can be sent to [email protected].
What’s happening
Hazeldenes began responding to a cyberattack on 19 February 2026. Packaging and delivery disruptions left pubs, butchers and supermarkets across Victoria short of chicken, with some businesses seeking alternative suppliers. The company began a phased production restart by 25 February. On 12 March, it confirmed that criminals had accessed and published stolen data, including personal information. Hazeldenes described the affected material as largely historical operational and corporate information, said it had obtained an interim injunction restricting use and sharing of the data, and promised to contact affected parties as required. Kaspersky later reported that DragonForce had claimed responsibility; Hazeldenes’ statements did not name the attackers. Regular production had resumed by 30 March, the latest company update found as at 3 November. The statements reviewed do not disclose how many people were affected, which personal details were exposed, or whether individual notifications are complete. Production recovery does not establish that the data exposure has been resolved.
- What
- Breach
- Affects
- Hazeldenes poultry operations and company-held personal information
- Fixed in
- Nothing to patch
- Since
- 19 Feb 2026
- Closed
- 30 Mar 2026
Timeline
- Update
Hazeldenes confirmed that regular production had resumed safely and securely. The statement gave no further outcome for the stolen personal information.
- Vendor revised
Hazeldenes confirmed that criminals had accessed and published stolen data, including personal information, describing the affected material as largely historical operational and corporate information. It said it had obtained an interim injunction restricting use and sharing of the data and would contact affected parties as required.
- Update
Hazeldenes announced a phased return to production. Its investigation remained ongoing.
- Made public
ABC reported that packaging problems prevented Hazeldenes from filling some orders. Pubs, butchers and supermarkets across Victoria reported missing deliveries and chicken shortages.
- UpdateNothing to patch
Hazeldenes began responding to a cyber incident, taking containment measures, engaging external cyber security specialists and notifying authorities.
Sources
- 23 February 2026Hazeldenes · 24 Feb 2026
- 25 February 2026Hazeldenes · 25 Feb 2026
- Cyber Incident Update 12 March 2026Hazeldenes · 12 Mar 2026
- Cyber Incident Update 30 March 2026Hazeldenes · 30 Mar 2026
- Cyber attack takes major chicken processor Hazeldenes offline leaving businesses without meatABC News · 23 Feb 2026
- Fowl play: Aussie poultry processor confirms cyber attack, chicken shortages hit customersCyber Daily · 24 Feb 2026
- A brief overview of the main incidents in industrial cybersecurity. Q1 2026Kaspersky ICS CERT · 18 June 2026