EARF
United States Flag
United StatesNorth America
Japan Flag
JapanAsia
Italy Flag
ItalyEurope
Netherlands Flag
NetherlandsEurope
United Kingdom Flag
United KingdomEurope
EARFSTAGE
EARFSTAGEFestivals and live sets
METAR | EARF
EARFWeatherLive weather stations
EARFWiki
EARFWikiCountries and public records
EARFguessGuess where on Earth
/physical-document-leak/the-cabinet-files-2018
222/430

File EL-0209HighResolvedPhysical Document Leak / Government Records Exposure

The Cabinet Files

Also filed as Australian Cabinet Documents Leak · Canberra Filing Cabinet Leak

Thousands of top-secret Australian Cabinet documents, spanning multiple decades, were discovered in locked filing cabinets sold at a government surplus auction in Canberra. The leak represented a significant failure in physical document security protocols within the Australian federal government. The documents revealed sensitive details regarding national security, counter-terrorism strategies, and internal political decision-making.

  • #australia
  • #cabinet-files
  • #national-security
  • #data-breach
  • #physical-security
  • #asio
  • #afp
Notoriety7/10
Event
31 Jan 2018
Disclosed
31 Jan 2018
Target
Australian Government
Actor
Accidental Loss / Third Party
Scale
Thousands of documents
Status
Resolved

01Summary

The incident occurred when two locked filing cabinets, containing thousands of classified Cabinet documents, were sold at a government surplus auction in Canberra. The documents, which covered five separate Australian governments, were found to be highly sensitive, containing 'Top Secret' intelligence briefings. The leak exposed the inner workings of Australia's national security apparatus and political decision-making processes. Key revelations included the Australian Federal Police (AFP) admitting to the loss of nearly 400 national security files over five years. Furthermore, the files revealed political cynicism, notably documenting the previous government's alleged disregard for safety warnings regarding the 'Pink Batts' home insulation scheme due to economic pressures.

02Background

The incident highlighted systemic weaknesses in the physical handling and storage of classified government records. Historically, the Australian government has maintained strict protocols for handling sensitive materials, making this accidental exposure a major breach of trust and security procedure. The documents spanned a period of significant political and national security change in Australia.

03Key revelations

  1. 01The Australian Federal Police (AFP) admitted to losing nearly 400 national security files over a five-year period.
  2. 02The documents contained 'Top Secret' intelligence briefings concerning Australia's regional neighbors and counter-terrorism measures.
  3. 03The files revealed political decisions, such as the alleged prioritization of economic stimulus over safety warnings regarding the 'Pink Batts' home insulation scheme.

04Technical analysis

The breach was purely physical, involving the loss of secure storage containers rather than a digital cyberattack. The vulnerability exploited was poor physical asset management and inadequate key control for classified materials. The documents themselves contained various forms of intelligence, including counter-terrorism strategies and diplomatic cables.

Attack vector
Physical Loss / Theft
Attack method
Negligence / Poor Asset Management
Initial access
Physical Removal
Exfiltration
Physical Removal

Vulnerabilities exploited

  • Physical Security Protocol Failure

05Threat actor

Aliases

  • Second-Hand Furniture Seller

Attribution sources

  • ABC News

06Victims and impact

Countries affected

  • Australia

07Data exposed

Data types

  • Classified Documents
  • Intelligence Briefings
  • Political Correspondence
  • National Security Records

Notable documents

  • Cabinet Minutes
  • Intelligence Briefings
  • AFP Loss Reports

08Financial damage

Damage was primarily reputational and procedural, rather than direct financial loss.

09Timeline

  1. 2018-01-31Discovery and public disclosure of the classified Cabinet files in a Canberra second-hand shop.

10Key figures

  • Rudd/Gillard GovernmentPrevious Government · Australian GovernmentAustralianDocumented political decisions and alleged negligence.

11On the record

Thousands of top-secret Australian Cabinet documents found in a locked filing cabinet sold at a second-hand shop.

ABC News, Summary of the leak's scope.

12Reaction and fallout

Public reaction

The public reaction was characterized by embarrassment and calls for immediate, sweeping reforms in government record-keeping and security protocols. The incident severely damaged public trust in the physical security measures of the Australian federal government.

Political impact

The leak forced multiple government inquiries into the handling of classified material, leading to intense political scrutiny of national security agencies. It fueled public debate regarding the accountability of political leaders for institutional failures.

Geopolitical consequences

The immediate geopolitical impact was minimal, but it underscored the vulnerability of national security information to internal negligence, potentially affecting diplomatic confidence in Australia's internal security management.

13Legal

While no major criminal charges were publicly reported as a direct result of the sale, the incident triggered internal government reviews and procedural changes aimed at preventing similar physical losses.

14Aftermath

Policy changes

  • Enhanced physical security protocols for classified documents
  • Mandatory digital archiving and tracking of sensitive physical records

Regulatory changes

  • Review of government surplus auction procedures for classified materials

Security improvements

  • Implementation of stricter key management and access control for secure storage facilities

15Significance and legacy

Significance

This incident is historically significant as one of the most embarrassing physical security breaches in modern Australian history. It demonstrated that even highly classified, 'Top Secret' information could be compromised not by sophisticated cyber warfare, but by simple human negligence and poor asset management. It set a precedent for increased public and political scrutiny of government physical security protocols.

Legacy

The legacy of the Cabinet Files leak is a permanent emphasis on the need for robust, multi-layered security protocols for physical records. It contributed to a cultural shift within Australian government departments toward greater digitalization and accountability in document handling.

16Disclosure and media

Authentication
Source reporting and physical inspection

Media partners

  • ABC News

Publishing organisations

  • ABC News

17Field notes

  1. 01The documents spanned five different Australian governments, providing a unique historical cross-section of political history.
  2. 02The cabinets were sold cheaply because the keys were lost or inaccessible, making them appear worthless to the initial buyers.

18Resolution

The government acknowledged the failure and implemented procedural and policy changes to prevent the loss or unauthorized sale of classified materials.

19Sources

Official documents

  • Internal Government Security Review Reports (Post-2018)

References

  1. [1]ABC News Reporting (2018)
  2. [2]Australian Federal Police (AFP) Statements
Fact sheetEL-0209

Dates

Event
31 Jan 2018
Discovered
31 Jan 2018
Disclosed
31 Jan 2018
Ongoing
No

Target

Organisation
Australian Cabinet / ASIO
Type
Government
Sector
National Security / Political
Country
Australia
Gov. level
Federal

Actor

Name
Accidental Loss / Third Party
Nationality
Australian
Affiliation
Government Surplus Auction
Motivation
None (Accidental)
Arrested
No
Convicted
No

Data

Volume
Thousands of documents
Sensitivity
Top Secret
Published
Yes
Sold (dark web)
No

EARFLeaks documents publicly known security incidents. It does not host, store or distribute leaked data.

© 2026 EARF. All rights reserved.