KPMG Client Leaks: $19,000 Fines, 1,000 Jobs on the Line
Two days of parliamentary evidence have laid bare how confidential client documents moved inside Australia's third-largest accounting firm — and how little the people responsible were made to pay.
The KPMG client leaks affair went back before a parliamentary committee this month, and it produced one figure that is hard to shake off: $19,000. That was the internal fine handed to a KPMG partner in April over conduct sitting at the centre of the scandal — the misuse of a client's confidential documents. Over roughly the same period, the firm won Westpac's external audit, a contract worth about $32 million a year.
The Parliamentary Joint Committee on Corporations and Financial Services has now run two full days of evidence. The first, on 19 June, stretched close to 11 hours and pulled in more than 30 witnesses. The second sat on 14 August. New chief executive John Sams told the committee the firm's failings were indefensible, and Reuters reported the inquiry was told that many more whistleblowers have since come forward.
If you have never hired an auditor in your life, this still lands close to home. KPMG signs the accounts of companies your super fund holds, and it carries Commonwealth contracts worth more than $270 million. The federal Department of Finance classified the affair a "significant event" in June and negotiated a pause on new KPMG bids that runs until 30 September.
What Actually Went Missing, and When
The conduct is not recent. Most of it dates to 2023 and 2024, which is a large part of why the hearings have been so uncomfortable for the firm — the gap between the acts and the accounting is measured in years, not months.
A folder of rival audit bids
Between June and August 2023, KPMG staff accessed a Lendlease folder holding the board's assessments of competing audit pitches from EY and PwC. Lendlease had used KPMG as its auditor for 68 years. Chief executive Tony Lombardo and chairman John Gillham told the June hearing that trust had been severely damaged, and that KPMG had refused to hand over documents relating to Lendlease's own material, citing legal professional privilege.
The Westpac pitch that followed
On 10 October 2023, seven KPMG audit staff in a meeting led by partner Kim Lawry displayed confidential Lendlease material during a pitch to Westpac. In March 2024, Westpac selected KPMG as its preferred auditor, replacing PwC. Westpac later demanded Lawry's removal, and he resigned from the firm's board in July.
Optus, Dexus and 'Lunchgate'
KPMG has since acknowledged further breaches, including confidential Optus information shared internally during an unsuccessful bid for Telstra's audit. A separate November 2023 episode involving Dexus material, in which a partner allegedly joked about leaving a laptop open, became known inside the firm as "Lunchgate".
The Penalties That Didn't Match the Damage
In April 2026 the firm imposed internal fines: roughly $40,000 on then-chief operating officer Eileen Hoggett, $22,000 on partner Paul Rogers, $19,000 on Lawry. A second round in July applied penalties totalling up to $180,000 across seven partners and staff over the Optus and Telstra matters. Set against a $32 million annual audit engagement, those numbers explain much of the public anger.
The collective bill has been far larger. KPMG Australia is cutting around 1,000 roles — close to a tenth of its workforce — by September, and has weighed partner pay cuts of up to 20 per cent. The people who wrote the cheques for the fines and the people losing jobs are largely not the same people.
How the KPMG Client Leaks Reached Parliament
A staff member made a formal internal disclosure on 30 May 2024 and, within weeks, was given a termination-or-relocation ultimatum. Covert laptop searches followed. An Allens investigation code-named Project Magenta ran 14 interviews, most about half an hour, and never spoke to the whistleblower. It initially found the allegations unsubstantiated. Senator Deborah O'Neill put the claims on the public record under parliamentary privilege on 24 March 2026.
There were major failings here that we have to reflect on, and I'm not going to try and defend any of those, because they're indefensible.
That was Sams at the August hearing, as reported by Reuters. Since May, KPMG Australia has lost its chief executive, its head of audit, its chair, its chief operating officer, its general counsel, its HR chief and its chief risk officer. Michael Ebeid was elected independent chair on 12 August.
Why This Matters for Your Super and Your Shares
Auditor independence is the plumbing under every set of numbers a fund manager prices. ASIC chair Sarah Court called the conduct an egregious and serious breach of trust, and the regulator has since opened a sector-wide review of the Big Four and put roughly 2,900 registered auditors on notice. Macquarie ordered an integrity review of its own KPMG appointment; the Reserve Bank said it does not expect to reappoint the firm to its whistleblower service.
The obvious comparison is PwC Australia's 2023 tax-plan leak, which ended with the firm offloading its government consulting arm for a nominal sum. That scandal involved confidential government policy. This one involves private client documents — arguably closer to the product itself, which is why Treasury's July options paper canvassed splitting audit from consulting outright.
What to Watch Before 30 September
Several clocks converge at the end of next month:
- Dr Ian Watt AC reports on KPMG's culture, ethics and governance on 30 September.
- The Commonwealth pause on new KPMG bids expires the same day, as does a parallel Victorian arrangement covering about $24 million in contracts.
- ASIC's formal investigations into individual partners continue, alongside a Greens referral to the National Anti-Corruption Commission.
If you hold shares directly, the practical move is to check who audits them and how long they have held the mandate — proxy adviser Ownership Matters has pushed for mandatory tendering every 10 years, and boards will face questions on it this AGM season. For everyone else, watch what the government does on 1 October. Whether the bid pause lifts quietly or hardens into rules will tell you far more about the consequences here than any fine already handed down.
Comments 0