On the afternoon of 9 November 2018, a man drove a ute loaded with gas cylinders into Bourke Street in Melbourne’s CBD, set it alight, and then attacked passers-by with a knife. One man, the beloved Pellegrini’s co-owner Sisto Malaspina, was killed; two others were wounded before police shot the attacker, who died that evening. No criminal trial followed, because the attacker did not survive. The legal reckoning came instead through a coronial inquest, which examined not only how each man died but what the system knew beforehand — and what it should do differently.
Our newsroom has revisited the full public record on the Bourke Street attack: the police account given at the time, contemporaneous mainstream reporting, and the findings of the Coroners Court of Victoria handed down on 28 June 2021. Where matters remain legally qualified or were left open by the inquest, we have generalised rather than guessed.
Overview: what happened on Bourke Street #
Shortly after 4:00pm, a four-wheel-drive utility was driven into the Bourke Street precinct near the Swanston Street intersection and burst into flames. The driver, 30-year-old Hassan Khalif Shire Ali, had loaded the vehicle with gas cylinders; the apparent intention that they explode was not realised. He got out and began attacking people nearby with a knife.
Sisto Malaspina, the 74-year-old co-owner of the much-loved Pellegrini’s Espresso Bar, was fatally stabbed. Two other men — a security guard and a Tasmanian visitor to the city — were wounded and survived. Two uniformed officers confronted the attacker in the middle of the road as a bystander, who became widely known afterwards for pushing a shopping trolley at the man, tried to intervene. Police shot Shire Ali in the chest. He was taken to hospital and died of his injuries that evening.
The investigation and the terror finding #
Victoria Police said within hours that the attack was being treated as terror-related. The investigation was led by the Joint Counter Terrorism Team, which brings together Victoria Police, the Australian Federal Police and intelligence agencies, alongside the command structure that runs Victoria’s specialist squads. The Islamic State group issued a claim of responsibility. Police were careful — as they always are — to separate an organisation asserting a link from any evidence of operational direction.
What emerged was a now-familiar profile. Shire Ali was known to authorities; his passport had been cancelled some years earlier over concerns he intended to travel to a conflict zone. His family spoke of mental illness; police described a man who had become radicalised. That combination — grievance, ideology, mental ill-health and easily obtained everyday weapons — is the signature of the lone-actor threat that Australian agencies have warned about for a decade. It is also the hardest kind of attack to prevent, because it requires little planning, no network, and no special equipment.
Court and coronial outcomes #
Because the attacker died, there was no criminal prosecution. The formal examination of the attack therefore fell to the Coroners Court of Victoria, which investigated the deaths of both Sisto Malaspina and Hassan Khalif Shire Ali under a single inquest. The coroner’s findings were handed down on 28 June 2021.
The inquest found that Shire Ali held an allegiance to the Islamic State group and had intended to carry out a terrorist attack in the City of Melbourne in pursuit of a violent extremist objective. It documented a marked escalation in his behaviour in the months before the attack and examined what the various agencies that had contact with him knew, how they shared information, and how he was managed. As with every coronial inquest of this kind, the purpose was not to assign criminal blame — that is not the coroner’s role — but to establish the facts and to make recommendations aimed at prevention. The prevention focus that drives this work is explained in our coverage of how Victoria’s coroners work.
That distinction matters for readers trying to understand “the outcome”. In the ordinary sense of a verdict and a sentence, there was none, because there was no living accused. The coronial findings are the closest thing to an authoritative public account, and they are directed at the systems around the event rather than at punishment.
In context: Melbourne’s run of attacks, 2016–2018 #
The Bourke Street attack did not happen in isolation. It came at the end of a roughly two-year period in which Melbourne’s CBD was struck repeatedly. In December 2016, police disrupted an alleged plot to attack Federation Square on Christmas Day. In January 2017, a driver drove into pedestrians in the Bourke Street Mall in a separate, non-terror incident. In December 2017, a driver deliberately drove into pedestrians at Flinders Street. Taken together, these events reshaped how the city thinks about the protection of crowded public spaces — and explain the bollards, the revised event planning and the heavier visible policing that are now permanent features of the CBD.
The aftermath and what changed #
For Melbourne, the loss of Sisto Malaspina was personal. Pellegrini’s had been a Bourke Street fixture for more than sixty years, and the city held a state-recognised farewell that drew thousands. Beyond the grief, the attack hardened a set of practical questions for police and emergency planners: how to protect open public spaces without fortifying the city, how front-line officers should respond to a fast-moving attack, and what role the public can play in the seconds before police arrive.
The coronial recommendations fed into the continuing work of managing public order in the Melbourne CBD and into the information-sharing arrangements between police and intelligence agencies. None of it removes the underlying risk. What Bourke Street demonstrated is that the people closest to an incident — officers on patrol, paramedics and bystanders — carry an outsized share of the response, and that a city’s resilience is measured partly in how it grieves and how it carries on.
If you have information about any crime, contact Crime Stoppers on 1800 333 000. The National Security Hotline is 1800 123 400. In an emergency, always call Triple Zero (000).
