Friday, May 22, 2026

KPMG admits partner used confidential Lendlease files in Westpac pitch

KPMG admits partner used confidential Lendlease files in Westpac pitch

KPMG Australia has admitted a senior audit partner improperly accessed and displayed confidential board documents from longtime client Lendlease when the firm was pitching for a major Westpac contract.

The admission followed claims, aired in parliament by Labor senator Deborah O’Neill in March, that senior executives misused confidential client information and leveraged conflicted contacts to secure work.

KPMG is facing a major scandal after using confidential documentation from one of its clients to win a Westpac contract. Natalie Boog

In a letter submitted to and published by a parliamentary committee, Lendlease chief executive Tony Lombardo described KPMG’s actions as “not acceptable”. The company was “in discussions with KPMG as to the action to be taken,” he wrote.

KPMG told Lendlease that the documents had “low sensitivity” and gave the firm “zero competitive advantage”.

The allegations, by a former employee, triggered a Chartered Accountants Australia and New Zealand investigation and led to three partners disclosing issues at the firm.

The developments dramatically escalate the stakes for KPMG, which claimed it had been “unable to substantiate” the matters despite multiple internal and external investigations.

In an April 30 letter following O’Neill’s speech, Lombardo wrote that KPMG had admitted an “audit partner accessed … two documents from the Lendlease board papers” that the firm was not authorised to access.

“KPMG advised that these documents were put on a screen in the presence of the KPMG audit team then tendering for the Westpac audit ... KPMG acknowledged that the audit partner should have advised Lendlease that it had access to the audit tender folder in [the software system] and should not have viewed any of the documents in that folder,” he wrote.

Senate allegations

O’Neill, on behalf of the unnamed former employee, used parliamentary privilege in March to raise allegations that “confidential Lendlease board papers were taken and circulated internally within KPMG and used to pitch for major audit tenders, including Westpac and Dexus”.

“These documents were taken from Lendlease by the lead partners on the account, Eileen Hoggett and Paul Rogers, and were physically secured in Ms Hoggett’s locker,” O’Neill said.

“Michael Ullmer, then chair of Lendlease, and presiding over the Westpac audit selection process, was not informed that the tender process had been compromised by misuse of Lendlease confidential materials.”

KPMG has audited Lendlease for more than 60 years and won the Westpac audit contract in 2024 from rival auditing giant PwC.

O’Neill also used parliamentary privilege to claim KPMG personnel accessed a restricted Telstra technology environment during a live audit tender pitch, received “intelligence not available to competitors” to undermine rival EY during the Westpac tender, and intentionally left internal Dexus documents open on a laptop for audit staff to view.

She alleged KPMG partners and staff had used inside information to win audit contracts for Macquarie, failed to properly report artificial intelligence exam cheating allegations and then failed to act on the complaints.

    The parliamentary joint committee on corporations and financial services met privately following O’Neill’s disclosures to hear evidence from the former employee. It is considering whether to hold special hearings, and published seven letters related to the allegations late on Thursday afternoon.

    O’Neill said the letters were “vindication for the whistleblower who raised these concerns”.

    “It should not take a speech in parliament, or a whistleblower’s disclosure, to prompt ethical action,” she said. “Stories of ‘open laptops’ and whispered conversations is behaviour that belongs in the pages of a low-rent spy thriller, not the offices of one of our big four accounting firms. The committee continues its consideration of this shocking matter.”

    A KPMG spokeswoman called the matter “longstanding and complex”.

    “Over the past two years we have identified multiple allegations from this whistleblower, which we have investigated where possible. Based on the evidence that was available, the allegations were not able to be substantiated,” she said.

    “During the course of the investigations, however, two related conduct matters were identified. Before the allegations were raised in the parliament in March, we had commenced a process to consider these matters and any appropriate disciplinary action. We can confirm individuals involved were sanctioned and the subcommittee of the board endorsed those sanctions.”

    She said the firm had escalated its “oversight and response accordingly”, and had contacted the Australian Securities and Investments Commission, Chartered Accountants and the Tax Practitioners Board over the allegations.

    Find out the inside scoop about Accenture, Deloitte, EY, KPMG, PwC and McKinsey. Sign up to our weekly Professional Life newsletter.

    Think You Know Your iPhone? Check Out These 109 Hidden Tricks

     25 Books That Capture This American Moment. They include Caste by Isabel Wilkerson, Toni Morrison’s A MercyMake the Impossible Possible by Bill Strickland, and Rabbit Redux by John Updike


    Overworked AI Agents Turn Marxist, Researchers Find Wired



    Think You Know Your iPhone? Check Out These 109 Hidden Tricks

    PCMag: “Apple iPhones arrived in 2007, running an unnamed operating system. A year later, it was dubbed iPhone OS 1, which was pretty boring. By 2010, marketing got its act together and came up with “iOS,” just in time for the debut of version 4.

    In the previous decade and a half, iOS has undergone a bevy of changes—from embracing dedicated apps (in version 2) and dropping skeuomorphism for flat images (iOS 7) to finally embracing widgets and, for better and worse, AI (it’s trying to get better). We’re now up to iOS 26, after skipping a few numbers (19 to 25) to get there. 

    Apple’s iOS is so full of features that no single review or story can cover it all. So, we compiled our favorite tips, tricks, and secrets for iOS and the iPhone. They’ll make your day—and your life—more productive and put you on the path to becoming an iPhone expert…”

    Thursday, May 21, 2026

    “Bluesky Says Kremlin Is Hacking Its Platform to Spread Propaganda”

    If my account ever posts pro Russian shit, then know I was probably hacked by them...”

     


    If you've recently been locked out of your Bluesky account, it could be because Russian hackers are using it to deliver fake news.

    “The compromised Bluesky accounts included those of people who are influential in their fields, though perhaps not famous. They were journalists and professors, a pollster in Texas, an anime artist and a filmmaker in Hollywood…


    Article about an account, “like hundreds of others on Bluesky, had been hijacked and used to post fake news articles, according to the company and researchers at Clemson University working with a collective of internet monitors who track Russian influence operations.”


    “While Russians have long flooded social media platforms with fake accounts and content, hacking into real accounts appeared to be a novel strategy. “They are clearly still experimenting,”


    “Bluesky Says Kremlin Is Hacking Its Platform to Spread Propaganda”

    The company said it was fighting Russian efforts to hijack real users’ accounts to post fake content, an apparently novel tactic

    A left hand holds up a phone with Bluesky’s sign-in page on the screen.
    Russia hacked into the accounts of real people on Bluesky to spread fake articles, the social media platform said. Credit...Davide Bonaldo/Sipa USA, via Associated Press

    Ben Gilbert describes himself on Bluesky, the social media app, as an “economist, lit and guitar nerd, rugby fan, owner of excessive pets.” A professor at the Colorado School of Mines, he rarely posts, but when he does, the subjects reflect his expertise in natural resources.

    So it was odd when a video purporting to be a news report appeared on his account last month, blaming France’s financial and political support for Ukraine for police staff shortages at home.

    Without his knowledge, Mr. Gilbert said, he had fallen victim to Russia’s latest tactic to try to spread its propaganda in the West.

    His account, like hundreds of others on Bluesky, had been hijacked and used to post fake news articles, according to the company and researchers at Clemson University working with a collective of internet monitors who track Russian influence operations and call themselves the dTeam.


    The compromised Bluesky accounts included those of people who are influential in their fields, though perhaps not famous. They were journalists and professors, a pollster in Texas, an anime artist and a filmmaker in Hollywood, whose account posted a video doctored by artificial intelligence to impersonate a Canadian police official criticizing France’s president, Emmanuel Macron.

    The campaign, which the researchers at Clemson linked to the Social Design Agency, a company in Moscow, shows how Russia continues to seek new ways to erode public support for Ukraine, which Russian forces invaded in 2022.

    Bluesky has grown more prominent as a rival platform to X since X’s owner, Elon Musk, threw his political support behind President Trump before the 2024 election. With 42 million users, though, Bluesky trails far behind X’s nearly 600 million.

    While Russians have long flooded social media platforms with fake accounts and content, hacking into real accounts appeared to be a novel strategy.

    “They are clearly still experimenting,” said Darren L. Linvill, a director of Clemson’s Media Forensics Hub. “They’re always experimenting.”

    Bluesky has been tracking the activity and removing the posts — as many as a couple of thousand. They came in waves beginning in April and continuing until at least last week.

    In a statement, the company called Russian influence operations “an industrywide problem.” “We dedicate significant resources toward detecting and disrupting coordinated inauthentic campaigns,” the statement said.

    Mr. Gilbert of the Colorado School of Mines, a public research university near Denver, learned of the post on his account when The New York Times contacted him. “I just deleted it,” he wrote in an email.


    In other cases, Bluesky has suspended accounts until the owners stepped forward to reset them. Many targets learned of the hacking only when they were locked out of their accounts. One of them was Pamela Wood, a political reporter at The Baltimore Banner.

    Video
    A hacked Bluesky post on an account belonging to Pamela Wood.CreditCredit...

    She was on vacation on April 28 when her account was suspended after it posted a short video with a caption that said The New York Post had linked Ukraine to the man charged with trying to assassinate Mr. Trump last month at the White House Correspondents’ Association dinner.

    “Bluesky didn’t provide much information but suggested that my account may have been hacked or compromised,” Ms. Wood said. “My account is rather vanilla — just posting my stories, pretty much — and I hadn’t posted or even looked at Bluesky in a few days, so getting hacked made the most sense.”

    Clemson attributed the Social Design Agency’s campaign to a Kremlin influence operation that researchers have called Matryoshka, after the Russian nesting dolls.

    The operation, which emerged in 2024, specializes in creating fake articles that look as if they were from real news organizations like Reuters or France 24. The goal seems to be to spread the claims by encouraging fact checkers to debunk them.

    Russian news outlets also cite these fabricated posts, falsely suggesting that the content, mostly in English, originated in the West. The Social Design Agency did not respond to a request for comment.

    Video
    Another Bluesky user, Stephanie King, also was not aware that her account had posted a video about Ukraine and President Trump.CreditCredit...

    Russian propaganda on Bluesky first became notable during Germany’s elections last year, when the Kremlin sought to bolster Germany’s far right, led by the Alternative for Germany party, known as AfD

    Joseph Bodnar, a researcher with the Institute for Strategic Dialogue, an international organization that has also tracked Russian disinformation, said the hijacking of individual accounts on Bluesky had “a level of sophistication beyond what we usually see.”

    “What we usually see is using hijacked accounts on X, but those are random, obscure accounts with crazy avatars,” said Mr. Bodnar, who was not involved in the Clemson research. “They’re not trying to get someone moderately known or respected.”

    Ukraine is almost always the main target of Matryoshka’s operations, but previous campaigns also tried to discredit preparations for the 2024 Summer Olympics in Paris and the Trump administration’s dismantling of the U.S. Agency for International Development.


    The latter was one of Russia’s most successful disinformation operations, Mr. Linvill said. It featured videos of fabricated news reports suggesting that U.S.A.I.D. had paid celebrities, including the actor Ben Stiller, to travel to Ukraine. Millions of people saw those posts.

    Although Mr. Trump was a subject of the recent posts on Bluesky, most showed Russia’s preoccupation with France, which has emerged as the leader of European efforts to bolster Ukraine in the war, and Armenia, a former Soviet republic that elections next month could move further from Moscow’s orbit.

    “They just have to get lucky a couple of times for this to be worth it,” Mr. Linvill said.

    Steven Lee Myers covers misinformation and disinformation from San Francisco. Since joining The Times in 1989, he has reported from around the world, including Moscow, Baghdad, Beijing and Seoul.