An Australian online retailer has found itself the latest local company targeted by a hacker behind a string of attacks on Aussie government agencies and businesses.
The threat actor, who calls themselves 2019, posted details of data they allege was stolen from HotToner Australia, a company that specialises in printer consumables.
The data – which 2019 says contains the records of more than 201,700 HotToner customers – is currently being sold to a single buyer, with the hacker providing contact details in a for sale post on a popular underground hacking forum.
The data is available in two sets. The first dataset contains customer IDs, names, telephone details, and company IP and physical addresses. The second dataset contains similar data, in addition to shipping information, payment details, and company information.
Samples of each dataset were provided, and they include both Australian individuals and several Australian companies.
The data was posted for sale on July 10, and so far no buyer appears to have come forward.
Cyber Daily has reached out to HotTone Australia for comment.
Who is 2019?
The threat actor, known as 2019 on the forum in question, has been targeting Australian organisations since early 2026, with some of their most recent victims including the Melbourne International Film Festival, a Canberra medical clinic, and the Australian Centre for the Moving Image.
The hacker also compromised the Australian Productivity Commission’s email infrastructure to contact and harass several Australian journalists, including Cyber Daily writers.
Very little else is known about their identity.
Who is HotToner Australia
HotToner Australia describes itself as the country’s “leading online supplier” of a raft of printer consumables, including ink & toner cartridges. The company was founded in 2005 and supports major printer brands such as HP, Canon, Brother, Epson, and Fuji Xerox.
The company also supplies its products to schools and government customers, and is based in Regents Park, New South Wales.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
David Hollingworth
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.