KPMG leaked confidential Optus information and surveilled whistleblower’s laptop, inquiry hears

KPMG Leaked Optus Data and Spied on Whistleblower, Inquiry Unveils

KPMG leaked confidential Optus information and surveilled - A parliamentary inquiry has uncovered new details about KPMG’s ethical misconduct, including the deliberate sharing of Optus’ sensitive information with Telstra’s audit team and the surveillance of a whistleblower’s laptop. These revelations came to light during a public hearing in Canberra on Friday, where KPMG’s leadership admitted to compromising confidentiality in pursuit of business interests.

Whistleblower’s Testimony Sparks Investigation

The whistleblower’s claims first surfaced in March when Senator Deborah O’Neill revealed their testimony under parliamentary privilege. The individual alleged that KPMG staff had leaked Optus data to colleagues vying for an audit contract with Telstra, a competitor in the telecommunications sector. This breach, which KPMG initially dismissed as unconfirmed, later led to the firm’s own partners admitting to leaking confidential information from Lendlease and Dexus.

“Information moving through an ethical divider … shouldn’t have moved through that divider,” said Martin Sheppard, KPMG’s chair, during the hearing. His statement marked the first public acknowledgment of the Optus leak, which involved staff auditing the company sharing unredacted data with Telstra’s bidding team.

The scandal escalated when KPMG’s former chief executive, Andrew Yates, disclosed that the leak motivated his resignation in May. Yates claimed he was compelled to step down after realizing the firm’s internal investigations had uncovered evidence supporting whistleblower allegations, which could have been addressed earlier. He also revealed he received $1.7 million as compensation for his notice period and an additional $2.4 million upon retirement under the partnership agreement.

Investigations Expand Beyond Optus Leak

The inquiry has now expanded to examine other alleged misconducts, including KPMG receiving inappropriate guidance as it bid for Westpac’s audit contract. However, the firm has yet to substantiate these claims. Meanwhile, the Chartered Accountants Australia and New Zealand (CAANZ) has launched an investigation into Yates and 11 other individuals, expressing outrage over the conduct described as “disgusting” by its CEO, Ainslie van Onselen.

Partners Eileen Hoggett and Paul Rogers are under scrutiny for their potential role in leaking Lendlease’s confidential data. Both have since stepped down from audit work and are being probed by the Australian Securities and Investments Commission. Tony Lombardo, Lendlease’s chief executive, criticized KPMG for withholding updates until the allegations were publicly disclosed in March. He stated the firm provided only fragmented information during the earlier months of 2025 and refused to share full details of its investigations.

Whistleblower’s Fears and KPMG’s Response

Julian McPherson, KPMG’s former head of audit, testified that he authorized a search of the whistleblower’s computer on 30 May 2024, fearing the individual might leak information while seeking employment elsewhere. The whistleblower had previously raised concerns about colleagues’ actions, warning of retaliation in an email to McPherson. “These are not isolated incidents but instead endemic within the organisation whereby profit and revenue growth is placed above everything else, including integrity, people, wellbeing and fundamentally doing the right thing,” McPherson wrote in a statement. “The lack of speak up culture, the culture of fear, retribution and revenue growth at all costs is not acceptable.”

McPherson described the process as starting with a conversation with the human resources team, followed by legal discussions. Additional laptop searches were conducted on 21 and 26 November 2024, during which evidence supporting the whistleblower’s claims was discovered. Yates noted these findings prompted KPMG to launch a formal investigation, though the firm’s handling of the case remained contentious.

Broader Implications for KPMG

KPMG’s long-standing audit contract with Lendlease, which spanned 68 years, is now under review. The company will seek a new auditor and aims to recover costs incurred due to the breach, according to Lombardo. Despite this, the firm has not fully addressed other allegations, such as receiving improper advice during the Westpac bid, leaving questions about its overall accountability.

The parliamentary joint committee has focused on KPMG’s initial dismissal of the whistleblower’s concerns as a human resources issue. This approach, they argue, delayed action and allowed the misconduct to persist. McPherson emphasized the systemic nature of the problem, highlighting how prioritizing profit over ethical standards created an environment where leaks and surveillance were justified.

Public Accountability and Future Steps

Sheppard, while acknowledging the Optus leak, has not pledged to revisit the terms of the whistleblower’s deed of release. This document, signed in 2025, effectively ended the whistleblower’s employment with KPMG. However, the inquiry is now pressing for greater financial and legal support for the individual, arguing that the current arrangement does not adequately address their grievances.

As the hearings continue, the focus remains on whether KPMG’s culture of secrecy and prioritization of business outcomes over ethical considerations will lead to broader reforms. The firm’s actions have sparked debates about corporate accountability and the role of whistleblowers in exposing misconduct. With multiple investigations underway, the outcome could reshape KPMG’s reputation and influence its future business dealings.

The scandal underscores the challenges of maintaining transparency in large organizations, particularly when profit motives conflict with ethical obligations. As the inquiry progresses, stakeholders will be watching closely to see if KPMG’s leadership takes decisive steps to rectify its mistakes and restore public trust. For now, the firm faces mounting pressure to demonstrate its commitment to accountability, both in its internal practices and its interactions with clients like Lendlease and Optus.