Labor Minister's WhatsApp Hacked in Scam
Cabinet minister Anne Aly's personal WhatsApp account was compromised after she opened a link sent by a trusted friend.
Updated on Nov. 9, 2026 in Cybersecurity
Live Poll
Have you ever received a scam message that appeared to come from a friend?
Labor cabinet minister Anne Aly had her personal WhatsApp account hacked after opening a scam link sent by a trusted friend. An unauthorised message asking recipients to vote for Nota in a dancing competition was then sent to her contacts.
Why it matters
The incident shows how scam links can spread through trusted personal networks and reach senior public figures. It follows the hacking of independent MP Zali Steggall's WhatsApp account earlier this year.
One cabinet minister's WhatsApp account was compromised through a scam link. The number of contacts who received the message and the number of others affected by the same URL have not been disclosed.
The players
Anne Aly
Anne Aly is a Labor cabinet minister in the Australian government.
Zali Steggall
Zali Steggall is an independent Member of Parliament who had her WhatsApp account hacked earlier this year.
The details
Aly inadvertently opened a link on her personal phone that had been sent by a trusted friend. The link led to an unauthorised message being sent to her WhatsApp contacts, which appeared personalised and referenced each recipient's name.
Timeline
March 2026: Independent MP Zali Steggall's WhatsApp account was hacked on both personal and government devices.
October 2026: The Australian Signals Directorate released its annual cyber security report warning of AI-enhanced scams.
9 November 2026: Aly's WhatsApp hack was reported by SBS News.
Big Picture
The compromise of Anne Aly's account follows the March 2026 hacking of independent MP Zali Steggall's WhatsApp, which also affected a government-provided device. Together the two cases show politicians' messaging accounts being targeted in successive incidents.
Anyone receiving a WhatsApp link from a known contact should check with that person before opening it, since the link may have come from a compromised account. Opening unexpected links can expose personal contacts to the same scam.
The takeaway
Verify unexpected links with the sender through a separate channel before tapping them, even when they arrive from a trusted contact. Account compromise can spread quickly through personal contact lists.
Further reading
For related coverage, see Cybersecurity reporting on scam and account-hacking trends.
Live Poll
Have you ever received a scam message that appeared to come from a friend?
