Support us
Keeping a news website alive during a cyberattack requires far more than restoring a server. A newsroom must protect its publishing system, preserve evidence, communicate with readers and continue reporting when the normal digital workflow has failed. For independent media, the stakes are especially high because a short outage can interrupt investigations, election coverage and public trust.
Australian audiences expect news to load quickly on phones during a commute, between shifts or over a morning coffee. A site serving readers in Sydney, Melbourne, Brisbane and regional communities may also be carrying urgent information about elections, floods, bushfires or security incidents. An attack can therefore become a public-interest emergency rather than a simple technical inconvenience.
The strongest defence combines preparation, editorial discipline and financial resilience. It also recognises that journalism organisations hold sensitive source details, unpublished investigations and records that may matter years later. Cybersecurity must protect both the website and the integrity of the reporting behind it.
A resilient news operation separates its public website from its administration tools, databases and internal communications. Multi-factor authentication, unique passwords, least-privilege access and regular software updates reduce the chance that one compromised account will expose everything. The Australian Signals Directorate’s Essential Eight provides a useful baseline for organisations reviewing application control, backups, patching and access restrictions.
Backups should be automatic, encrypted and stored in more than one location, including an offline or separately managed copy. They need to include article text, images, subscriber records, configuration files and publication metadata. A backup that has never been tested is only an assumption, so editors and technical staff should practise restoring a clean version while keeping an emergency publishing route available.
A cyberattack may involve distributed denial-of-service traffic, stolen credentials, defacement, ransomware or manipulation of content. Each scenario calls for a different response, but the first editorial rule is consistent: do not publish unverified claims about the incident. A temporary status page hosted away from the main infrastructure can provide verified updates, alternative contact details and links to trusted social channels.
Newsrooms should maintain a simple continuity kit containing current supplier contacts, domain and hosting information, recovery codes, incident templates and offline copies of essential phone numbers. Staff need to know who can authorise a shutdown, who speaks publicly and who checks that restored stories have not been altered. This matters in Australia’s concentrated media market, where audiences can quickly move to major broadcasters or large digital publishers if an independent outlet disappears.
The most damaging loss may be invisible to readers. An attacker who changes a draft, exposes a whistleblower’s identity or deletes interview recordings can compromise months of reporting. Sensitive material should be encrypted at rest and in transit, access should be logged, and source information should be kept separate from ordinary newsroom accounts wherever practical.
Archiving also protects journalism from disappearance, censorship and historical revision. Guidance on the preservation of war evidence explains why authenticated records can become important to future investigations and prosecutions. For a foundation supporting reporting from conflict-affected regions, a secure archive is part of the public service, not merely a technical repository.
An Australian publisher handling personal information must consider the Privacy Act 1988 and the Notifiable Data Breaches scheme. If an eligible breach is likely to cause serious harm, affected individuals and the Office of the Australian Information Commissioner may need to be notified. Legal advice should be sought quickly, particularly where subscriber information, payment details or confidential sources may be involved.
Operational decisions also need to reflect local habits. Many readers use mobile networks rather than fixed broadband, while regional audiences may face slower or less reliable connections. A lightweight emergency page, text-based updates and accessible email alerts can keep information moving when a feature-heavy site is unavailable. Staff should also avoid sending sensitive incident details through personal messaging apps that lack suitable organisational controls.
Cybersecurity costs money, and small nonprofits often have to choose between a new investigation and stronger infrastructure. That is why resilience should be treated as a core reporting expense. A modest budget for managed hosting, endpoint protection, independent audits, secure backups and incident-response support can prevent a much larger loss.
Revenue planning matters as well. Australian publishers operate in a competitive advertising and subscription market, while donation-supported organisations may experience sudden pressure during major news events. Clear supporter communication can explain why continuity safeguards protect editorial independence. Readers exploring independent media projects can also review Consulate Review as an example of how specialised publishing depends on credibility and consistent access.
A reliable partner can help turn that support into long-term capacity. The Free Press Foundation funds independent journalism, journalist education and reporting connected to Ukraine and global issues. Its model reflects a broader truth: keeping a news website online during an attack is inseparable from protecting the people, evidence and public trust that give journalism its value.
