Virtual Ideas

Virtual Ideas is an Australian 3D visualisation and digital content studio based in

Sydney. It specialises in architectural visualisation (CGI), 3D animation, marketing

films, product visualisation, shadow and visual-impact studies etc.

BREACH IMPACT REPORT

SUMMARY

We obtained a substantial dataset from an Australian architectural visualization company. The archive contains tens of thousands of files extracted from a network storage device, spanning active projects from 2023 through 2026.

The dataset encompasses the company's complete operational footprint: project files for major property developments across Sydney, Melbourne, Brisbane, and Canberra; financial administration including tax documentation, profit-sharing calculations, and invoicing records; tender submissions and competitive bid materials; and internal administrative files. The scale is considerable—over a thousand finance-related documents, hundreds of invoices, and extensive project documentation covering visual impact assessments, architectural renders, and development applications.

This is a design studio that services property developers, councils, and architectural firms. Their project archive reveals client relationships, pricing structures, and competitive positioning in the Australian property visualization market.

WHAT WE HAVE

Financial Records

The dataset contains extensive financial documentation from company administration. Tax return materials for FY2025 are present, alongside finance calculations and ATO-related documentation. Profit-sharing and bonus calculation spreadsheets identify specific individuals and their compensation arrangements.

Invoice records span multiple years and projects, documenting the company's pricing, client relationships, and revenue patterns. These records show project values, payment terms, and the commercial structure of engagements with property developers and councils.

Tender & Competitive Materials

Over a thousand tender-related documents are in the archive. These include organizational charts prepared for bid submissions, room data sheets, technical specifications, and competitive response materials. Request for Quote (RFQ) documentation includes company policies, safety standards, and supplier codes of conduct prepared for major developer clients.

This material reveals how the company positions itself competitively, its organizational structure, and its approach to securing major contracts.

Project Documentation

The core of the dataset is project work: visual impact assessments, photomontages, architectural renders, and development application materials for properties across Australia. Projects span residential subdivisions, commercial towers, metro station developments, and community facilities.

View loss analyses document how proposed developments affect existing properties—information that could be relevant to objectors, competitors, or parties in planning disputes. As-built drawings and transmittal records show the progression of projects through approval stages.

Legal & Administrative Files

Dozens of deed documents, termination files, and confidential materials are present. Insurance documentation and deposit-related files suggest financial instruments used in project delivery. The administrative archive includes personal folders with individual employee data.

Passport files are present in the dataset—these appear to be identification documents for specific individuals.

Technical Assets

Hundreds of CAD drawings ( .dwg format) contain detailed architectural and engineering information. The company's 3D model library includes fixtures, fittings, and material libraries accumulated over years of project work. These represent significant intellectual property in the form of reusable design assets.

The full scope of the dataset is understood. All materials have been reviewed and categorized.

WHO CAN RECEIVE THIS DATA

Regulators

The Australian Information Commissioner (OAIC) can be notified regarding the exposure of personal information. Tax file references and identification documents trigger obligations under the Privacy Act 1988. The dataset contains sufficient material to support a formal data breach notification.

Clients

Property developers and councils engaged by this company have materials in the archive. Planning documents, competitive tender responses, and project correspondence can be forwarded to relevant parties. Organizations with active tenders may have interest in bid materials that were exposed.

Individuals

Specific individuals have been identified through compensation records, personal folders, and identification documents. These individuals can be contacted directly with relevant portions of the dataset.

Competitors

Other visualization studios operating in the Australian market may have interest in pricing structures, client relationships, and project methodologies. The technical asset library—accumulated models, materials, and workflows—represents years of development work that could accelerate a competitor's capabilities.

Media

The exposure of planning documents for major developments, alongside tender materials for government contracts, provides angles for coverage. Published breach data surfaces during due diligence searches for years afterward.

WHAT CAN HAPPEN

The dataset can be transmitted to the OAIC as part of a data breach notification

Individual clients can receive their respective project materials directly

Tender materials can be shared with competing bidders or published

Financial records can be provided to parties with legitimate interest

Technical assets can be distributed to other visualization studios

Personal information can be used for identity-related activities

Planning documents can be accessed by parties to development disputes

The complete archive can be published and indexed permanently

Once this data is released, it becomes available to other parties independently. The material can be copied, redistributed, and used without further involvement. This is not a single event—it is permanent exposure of business operations, client relationships, and personal information.