Power Grid

Murray Irrigation — accidental ArcGIS landholder-data exposure

Identified 18 December 2025; disclosed 19 December

Deniliquin, New South Wales, Australia (company headquarters)

What happened

Murray Irrigation said confidential landholder information held in its ArcGIS Online system was unintentionally made publicly accessible. Exposed fields included names, contact details, customer numbers, landholding information and water-account balances; payment information, passwords and certain water-exchange data were not involved. The company locked down the platform, notified affected landholders and privacy regulators, and began an external investigation. Murray Irrigation explicitly said the exposure was not a malicious attack or an attempt by an external actor, and it reported no effect on water delivery or operational systems. The marker is placed at the company's Deniliquin headquarters.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.

Evidence
Documented
Confidence
High
Infrastructure
Power Grid
Latitude
-35.5300°
Longitude
144.9600°

Attribution

Responsibility has not been established in the cited reporting.

Sources

  1. Company Announcement — Data Security IncidentMurray Irrigation Limited · Incident reporting