Cyber attack on Australian book distributor leaves bookshops empty-handed before Christmas

Key points

• Unauthorised access to Alliance Distribution Services computer systems is believed to have occurred on 18 July 2026.
• ADS, a subsidiary of Hachette Australia, distributes 15 to 20 per cent of stock for some independent bookshops.
• No timeline for full restoration has been confirmed, and no data theft has been publicly reported.
• Independent bookshops face rising costs after being advised to source stock through alternative suppliers.

Six weeks ago, boxes from Hachette Australia stopped arriving at Mary Martin Bookshop in Melbourne. Owner Jaye Chin-Dusting knew something was wrong, but no one could tell her exactly what.

The cause, as first reported by ABC News Australia, was unauthorised access to the computer systems of Alliance Distribution Services (ADS), a company that moves books from Hachette's warehouse to booksellers across the country. Hachette says the incident is believed to have begun on 18 July.

What happened to ADS?

Hachette Australia confirmed criminals gained access to ADS systems without permission. Matthew Warren, Director of RMIT University's Centre for Cyber Security Research and Innovation, considers ransomware the most likely cause. Ransomware is malicious software that locks a company's files until a payment is made. Hachette hasn't confirmed this publicly.

The attack froze normal distribution operations. ADS staff have been manually processing some orders, prioritising new release titles. The backlog of older books, called backlist titles in the trade, remains hard to shift.

"ADS would supply us 15 to 20 per cent of the books that we usually have on our shelves," Chin-Dusting said. "If it goes on for much longer, our bookshop will need to start obviously having to look at other options."

Who is feeling the pain?

The timing is damaging. Christmas is the biggest trading season for booksellers, and September school visits are already being cancelled. Children's author Danielle Binks had planned to visit Adelaide, sign copies of her new book, and present to school students. She was told Hachette can't guarantee which shops have stock or restock them in time.

"My publicists and sales team at Hachette are equally gutted," Binks said.

Melbourne author Maxine Beneba Clarke warned on Instagram that the disruption could cost her a significant portion of her income, possibly for years.

Hachette advised booksellers to source stock through other channels, including online retailers or international suppliers. That shifts freight costs onto already squeezed small businesses.

Should bookshops and authors expect more transparency?

Both Binks and Chin-Dusting said Hachette has been slow to share details. "Communication has been a little bit of a challenge," Chin-Dusting said. Binks put it plainly: "Part of me wishes that there had been more transparency."

Hachette's public statement acknowledged the disruption and apologised, but gave no recovery date. Australia's Notifiable Data Breaches scheme, administered by the OAIC, requires companies to notify the regulator and affected individuals when a breach is likely to cause serious harm. No public notification has been filed at the time of writing. We first reported on this incident on 24 August, in our story on the broader supply freeze.

Professor Warren cautioned that as criminals use AI tools to automatically scan systems for weak points, incidents like this will become more frequent. Security investment, he said, is a responsibility organisations must own themselves, not an optional line item.

For readers who buy from independent bookshops: your local store may have gaps on the shelf right now through no fault of its own. Ordering in advance, asking staff what's available, and accepting delays are the most practical things you can do. Small businesses can't absorb these freight costs indefinitely, and if the disruption runs deep into October, some won't.