9th December, 2025
Cyber incident investigation into impacted information
Malibu Boats Australia has experienced a cyber incident. We have become aware that an unauthorised third party has named Malibu Boats Australia online and disclosed a portion of data that they indicate was taken from our IT environment without authorisation.
We launched an investigation to help determine what information was involved. We wish to assure our customers and staff that we take the protection of data seriously and are taking all appropriate steps to investigate. We have taken steps to secure our systems and have implemented a range of measures to prevent the risk of this occurring again.
We are working with various experts and external advisors to assist with our response to the incident. We have also informed and are engaging with the relevant government agencies, including the Australian Cyber Security Centre (ACSC) and the Office of the Australian Information Commissioner (OAIC).
Information involved
The data involved in this incident primarily relates to current or former staff members of Malibu Boats Australia – these individuals have been directly notified by us. Their data involved includes personal or employment-related information provided during onboarding or throughout their time with Malibu Boats Australia including tax file numbers, bank account details, superannuation details and employment information (such as payslips, employment agreements and salary information).
In addition, a limited number of external parties, specifically boat retailers and, in rare cases, boat owners who have interacted with Malibu Boats Australia may also be affected. We understand such information in most cases is limited to contact information, however we will contact impacted parties directly with support and guidance should we confirm that the impact extends beyond this. Importantly, our retailer's own systems and the information they hold were not involved or impacted by this incident.
We wish to assure our stakeholders that if they have not directly provided any information to Malibu Boats Australia, there is no action needed in response to this incident.
What steps can individuals take to protect their information?
We provide general cyber security guidance below on the steps individuals can take to protect themselves online and their information from potential misuse.
We are taking all appropriate steps in response to this incident and are committed to supporting those impacted.
Should any individuals have any questions regarding this incident or the guidance provided below, please contact our support team on privacy@malibuboats.com.au
Be aware of scams
We encourage you to stay alert to the possibility of phishing emails and scams, as these are common risks associated with unauthorised access to personal information and cyber events. If you receive an unexpected email, call, or message, especially one asking for personal information or money with a sense of urgency, or with obvious spelling and grammatical errors, be cautious. Verify the sender's identity through official channels before responding and sharing any information.
Check email addresses and links
Look closely at the sender's email address and any links provided. Scammers often use addresses that look very similar to legitimate ones, sometimes with just a single letter changed in the company name. Carefully check the sender address and hover over any links to see where the actual address before clicking. Practice the same caution with websites - if you are suspicious of a website address, do not click on the link or provide login details.
Use strong, unique passwords
Create strong passwords using a mix of letters, numbers, and symbols. Avoid using the same password on more than one account. Consider using a password manager to keep track of them.
Enable Multi-Factor Authentication (MFA)
Whenever possible, enable MFA on your online accounts for an extra layer of security, including on your email, banking and social media accounts. MFA typically involves receiving a code on your phone or email that you must enter in addition to your password.
Learn more about cyber safety
Read the Australian Competition and Consumer Commission's Scamwatch guidance for protecting yourself from scams here: https://www.scamwatch.gov.au/get-help/protect yourself-from-scams/. You may also want to read the OAIC's tips for further guidance about protecting your identity: https://www.oaic.qov.au/privacy/your-privacy-rights/tips-to-protect-your-privacy/
Additional general resources on identity and cyber security support can be found here:
· https://www.oaic.gov.au/privacy/data-breaches/data-breach-support-and-resources/
· https://www.cyber.gov.au/protect-yourself
· https://www.cyber.gov.au/report-and-recover/so-you-think-you-have-been-hacked
If you have further questions about the information contained in this statement, please reach out to privacy@malibuboats.com.au