罗恩·凯耶，克里斯汀·陈 据路透社审阅的文件显示，毕马威澳大利亚分所因将敏感政府资料转移至其安全环境之外，违反了与该国最大联邦机构的合同，促使官方考虑解聘该公司。
ron Kaye, Christine Chen KPMG Australia breached a contract with the country's biggest federal agency by transferring sensitive government material outside its secure environment, prompting officials to consider firing the firm, documents reviewed by Reuters show.
此事是这家全球会计事务所在其庞大的澳大利亚政府业务组合中，首次明显违反客户信息处理协议。截至2026年，毕马威持有的活跃联邦合同总额达6.5亿澳元（约合4.56亿美元）。
The incident is the global accounting firm's first apparent violation of client information-handling protocols regarding its vast portfolio of Australian government work — A$650 million ($456 million) in active federal contracts as of 2026.
毕马威澳大利亚分所一直处于一场丑闻的中心，因被指控共享机密私营部门客户信息以争取业务，该公司已承认此事，但坚称该行为未波及政府合同。
KPMG's Australian unit has been at the centre of a scandal over accusations it shared confidential private-sector client information to pitch for work, which it has admitted, but has maintained the conduct did not extend to government contracts.
2025年底发生的政府事件涉及澳大利亚服务部，该部门运营全国公共医疗和福利系统，掌握该国2700万人口中大多数人的数据。
The government incident in late 2025 involved Services Australia, which operates the country's public health and welfare systems and handles data of most of the country's population of 27 million.
毕马威和澳大利亚服务部在致路透社的评论中均表示，此事不涉及任何数据泄露，但该政府机构自那时起未再授予该公司任何新的审计工作。
Both KPMG and Services Australia said in comments to Reuters the matter did not involve any data breach, however the government agency has not awarded any new audit work to the firm since.
事件因一名毕马威员工从毕马威邮箱账户而非专门指派的澳大利亚服务部账户发送了一份标有“OFFICIAL: Sensitive”（官方：敏感）的草稿审计报告而曝光。
The incident came to light when a KPMG employee sent a draft audit report marked "OFFICIAL: Sensitive" from a KPMG email account rather than from a specifically-assigned account for Services Australia.
澳大利亚服务部审计分支的一名主管在2024年12月17日根据《信息自由法》获取的一封发给该部门国家审计经理萨莉·邦德的电子邮件中写道：“毕马威似乎已将机构资料带出网络，这违反了其根据合同承担的义务。”
"It appears KPMG has taken agency materials outside of the network which is in breach of their obligations under the contract," a director of the Services Australia audit branch wrote to the agency's national audit manager, Sally Bond, in a December 17 email obtained under Freedom of Information law.
这名主管的姓名被涂黑，他建议该机构向毕马威要求解释，然后“评估是否需要采取进一步行动……包括终止合同，并指出对此性质的违约不存在补救措施”。
The director, whose name was redacted, recommended the agency demand an explanation from KPMG then "assess whether any further action is required ... including termination of contracts, noting there is no remedy available for a breach of this nature".
一周后，Bond 致函 KPMG 称：“在我们的合作期间，KPMG 将信息转移到了 Services Australia 环境之外”，并补充说，这种转移“根据合同明令禁止”。
Bond wrote to KPMG a week later saying "information was transferred outside of the Services Australia environment by KPMG during our engagement", adding the transferral was "explicitly prohibited under the contract".
Bond 在 12 月 23 日的邮件中写道：“Services Australia 对此类违约行为极其重视。我们将同步联络相关机构团队，对情况进行审查。”同一天，Bond 在给另一位 Services Australia 总经理的邮件中写道，被带出政府系统的信息并非“特别令人担忧”，但表示：“我更担心的是 KPMG 违背合同行事，且未采取任何主动措施向我们保证这一点。”
"Services Australia takes a breach of this nature extremely seriously," Bond wrote in the email dated December 23. "We will be in parallel engaging with our relevant agency teams to undertake a review of the situation." In an email the same day to another Services Australia general manager, Bond wrote that the information taken outside the government system was not of "particular concern", but said: "I am more concerned that KPMG has acted outside the contract and has not taken any proactive steps to assure us of this fact".
KPMG 在 12 月 23 日的回复中称，唯一被转移出机构的文件是一份内部审计报告模板，且已被删除，涉事 KPMG 员工将面临后续处理，包括接受额外培训。
In a response to Bond on December 23, KPMG said the only document transferred outside the agency was an internal audit report template which had been deleted, and the KPMG employee involved would face follow-up action, including additional training.
文件未显示 Services Australia 是否采取了额外措施，但一份于 1 月完成的内部网络安全审查得出结论，数据泄露风险较低，并结案了此事。
The documents didn't show whether Services Australia took additional measures, but an internal cybersecurity review into the incident concluded in January that the risk of data breach was low and closed it off.
KPMG 在给路透社的声明中表示，已“向 Services Australia 确认未交换任何机密信息，并提醒我们的员工遵守数据协议方面的义务”。
KPMG said in a statement to Reuters it "confirmed with Services Australia that no confidential information was exchanged and reminded our people of their obligations in relation to data protocols".
一位 Services Australia 发言人告诉路透社，KPMG“使用了自己的网络和电子邮件系统，而非机构的系统，来起草和分发一份内部审计报告草案”，但该事件不构成数据泄露。
A Services Australia spokesperson told Reuters KPMG had "used its own network and email system, rather than the agency's, to develop and distribute a draft internal audit report", but the incident did not amount to a data breach.
该发言人补充说，机构“考虑了可用的合同选项”。由于“工作已基本完成且已采取补救措施，机构决定结束合作，而非终止合同”。
The agency "considered the available contractual options", the spokesperson added. Since "the work was substantially complete and remedial action had been taken, the agency finalised the engagement rather than terminate the contract".
“这是此类事件发生的唯一一次，自该事件发生以来，澳大利亚服务部未再授予毕马威额外的内部审计工作，”他们表示。
"This was the only instance of this type occurring and Services Australia has not awarded KPMG additional internal audit work since the incident," they said.
根据公开的政府招标数据，该部门于2024年向毕马威授予了一份价值1200万澳元的多年期“项目保障服务”合同，并于4月授予该公司一份价值69850澳元的合同，以提供精算服务。
The agency gave KPMG an A$12 million multi-year contract in 2024 for "program assurance services", and in April awarded the firm an A$69,850 contract to provide actuarial services, according to published government tender data.
专门研究审计的新南威尔士大学教授加里·门罗表示，无论带出政府系统的是何种材料，“这都是对客户信任的背叛”。
Gary Monroe, a University of New South Wales professor who specialises in audit, said regardless of what material was taken outside the government system, "it's a breach of trust with the client".
周四，政府表示，已将禁止毕马威竞标新联邦工作的禁令延长至2月28日，直至该公司修复文化和治理方面的弱点。
On Thursday, the government said it had extended a ban on KPMG bidding for new federal work until February 28, while the firm fixes cultural and governance weaknesses.