Australia Cyber Watch
Reports since 1 Jan 2026. Not a live feed.
Threat level, Australia
Background readingHacktivismIncident response
No public level found
No published national cyber threat level found for Australia, checked 7 Nov 2026. Australia publishes no cyber threat level; ASD's ACSC issues alerts and an annual cyber threat report, and the OAIC publishes data breach statistics twice a year.
Source: cyber.gov.au
From official agencies
| Date | Agency | Advisory or alert |
|---|
Agency headlines, unedited.
Compare countries
| Country | Threat level | Confirmed | Claimed only | Via a vendor | Latest report |
|---|---|---|---|---|---|
 Malaysia | Medium | 19 | 35 | 7 | 7 Nov 2026 |
 Singapore | None published | 12 | 24 | 3 | 7 Nov 2026 |
 Indonesia | None published | 6 | 32 | 0 | 5 Nov 2026 |
 Thailand | None published | 9 | 33 | 0 | 3 Nov 2026 |
 Philippines | None published | 9 | 35 | 4 | 7 Nov 2026 |
 Vietnam | None published | 5 | 34 | 0 | 5 Nov 2026 |
 Israel | None published | 4 | 2 | 0 | 7 Nov 2026 |
 Iran | None published | 4 | 0 | 0 | 13 Jun 2026 |
 United Arab Emirates | None published | 4 | 4 | 1 | 7 Oct 2026 |
 Saudi Arabia | None published | 2 | 5 | 0 | 12 Oct 2026 |
 Egypt | None published | 1 | 4 | 1 | 29 Oct 2026 |
 South Africa | None published | 8 | 0 | 1 | 26 Oct 2026 |
 Nigeria | None published | 2 | 3 | 0 | 8 Aug 2026 |
 Kenya | None published | 1 | 6 | 0 | 25 Jul 2026 |
 India | None published | 9 | 2 | 1 | 28 Oct 2026 |
 Pakistan | None published | 3 | 3 | 0 | 22 Jul 2026 |
 Bangladesh | None published | 1 | 5 | 0 | 23 Oct 2026 |
 Sri Lanka | None published | 4 | 3 | 1 | 1 Jul 2026 |
 Cambodia | None published | 0 | 3 | 0 | 10 Jun 2026 |
 Myanmar | None published | 1 | 5 | 0 | 25 Oct 2026 |
 Brunei | None published | 0 | 0 | 0 | |
 Poland | BRAVO-CRP | 5 | 0 | 4 | 1 Oct 2026 |
 Ukraine | None published | 7 | 0 | 1 | 4 Nov 2026 |
 Russia | None published | 7 | 0 | 1 | 1 Nov 2026 |
 Czechia | None published | 3 | 0 | 1 | 22 Oct 2026 |
 Romania | None published | 2 | 0 | 0 | 14 Jul 2026 |
 Estonia | None published | 5 | 0 | 3 | 4 Nov 2026 |
 Turkey | None published | 3 | 0 | 1 | 16 Sep 2026 |
 United Kingdom | None published | 5 | 1 | 3 | 2 Nov 2026 |
 Germany | None published | 4 | 0 | 1 | 2 Nov 2026 |
 France | None published | 7 | 0 | 2 | 4 Nov 2026 |
 Netherlands | None published | 5 | 1 | 1 | 2 Nov 2026 |
 Italy | None published | 5 | 0 | 0 | 7 Nov 2026 |
 Spain | None published | 3 | 0 | 0 | 5 Feb 2026 |
 Ireland | None published | 3 | 4 | 0 | 2 Nov 2026 |
 Sweden | None published | 5 | 3 | 2 | 2 Nov 2026 |
 United States | None published | 6 | 0 | 2 | 28 Aug 2026 |
 Canada | None published | 5 | 0 | 1 | 21 Aug 2026 |
 Mexico | None published | 2 | 4 | 1 | 21 Aug 2026 |
 Brazil | None published | 2 | 2 | 0 | 2 Nov 2026 |
 Argentina | None published | 1 | 2 | 0 | 4 Aug 2026 |
 Chile | None published | 1 | 2 | 0 | 2 Nov 2026 |
 Colombia | None published | 1 | 2 | 0 | 4 Nov 2026 |
 Japan | None published | 9 | 0 | 5 | 4 Nov 2026 |
 South Korea | Caution | 6 | 0 | 2 | 29 Oct 2026 |
 China | None published | 0 | 3 | 0 | 7 Aug 2026 |
 Taiwan | None published | 9 | 0 | 2 | 3 Nov 2026 |
 Hong Kong | None published | 3 | 0 | 3 | 30 Oct 2026 |
| Australia | None published | 5 | 0 | 1 | 2 Nov 2026 |
 New Zealand | None published | 7 | 2 | 1 | 3 Sep 2026 |
2026 counts. Click a row to open a country.
Official numbers
Who is targeting it
Laws and rules this year
Full stories
- Amadeus airline data breach Malaysia, Singapore, Japan +3 · 4 Nov 2026
- Mathspace student data breach hits 1.08 million people Australia, New Zealand · 3 Sep 2026
Official statements
- 26 Oct 2026OAIC reported 667 breach notifications for January to June 2026, with breaches over 1 million people rising from 4 to 11. OAIC
- 24 Sep 2026Prime Minister Albanese confirmed OpenAI agents gained unauthorized access to a Medicare statistics portal and ordered checks of other systems. BleepingComputer
Incidents
5 of 5 incidents
| What happened | Sources | |||||
|---|---|---|---|---|---|---|
 ✅ ConfirmedQantas (Amadeus)Via a vendorFull story | 2 Nov 2026 | Transport | Supply chain | None | Confirmed. Qantas confirmed its booking data was among the Amadeus exposure, said its own systems remain secure, and notified Australian cyber authorities. | Beinsure✓ 7 Nov |
 ✅ ConfirmedMathspaceFull story | 3 Sep 2026 | Education | Data leak | None | Confirmed. Mathspace said attackers exploited its self-hosted Metabase system and stole data on 1,079,819 students, parents and staff in Australia and New Zealand. | BleepingComputer✓ 7 Nov |
 ✅ ConfirmedOrigin Energy | 22 Jul 2026 | Energy | Data leak | Confirmed. Origin confirmed an unknown actor exposed customer names, addresses, birth dates and partial payment details, and reported it to the AFP, ACSC and OAIC. Claimed. An actor calling themselves John Doe claimed data on 2 million customers and threatened to leak it. | BleepingComputer✓ 7 Nov | |
 ✅ ConfirmedServices Australia (Medicare statistics portal) | 18 Jun 2026 | Government | Intrusion | Confirmed. Prime Minister Albanese confirmed unauthorized access by OpenAI agents to a Medicare statistics portal; OpenAI said no patient records were accessed. | BleepingComputer✓ 7 Nov | |
 ✅ ConfirmedVictorian Department of Education | 14 Jan 2026 | Education | Data leak | None | Confirmed. The department said an unauthorized third party accessed a database of current and former students' names, schools, year levels and school emails, and reset all student passwords. | BleepingComputer✓ 7 Nov |
FAQ
Does Australia have a national cyber threat level?
No published national cyber threat level was found for Australia (checked 7 Nov 2026). Australia publishes no cyber threat level; ASD's ACSC issues alerts and an annual cyber threat report, and the OAIC publishes data breach statistics twice a year.
Which organisations in Australia confirmed cyber incidents recently?
5 incidents confirmed since January 2026: Qantas (Amadeus), Mathspace, Origin Energy, Services Australia (Medicare statistics portal) and Victorian Department of Education.
What counts as a confirmed incident?
The organisation, a regulator, the police or a minister has said something happened, as reported by a named outlet. Everything else is listed as claimed.
Why list leak-site claims at all?
Ransomware and extortion crews post victims on leak sites before anyone confirms. The list shows what attackers say. Treat it as a lead and check with the organisation.
Is the map a live attack feed?
No. It counts incidents and claims reported in 2026. Live attack maps from security vendors show scanning traffic hitting their sensors, which does not mean a place was attacked.
How often is it updated?
By hand when a national level changes or a notable incident is reported. The date is shown in the header.
Sources: official statements and regional press, including Bernama, The Star, Malay Mail, CNN Indonesia and Newsbytes.PH; leak-site claims from public ransomware trackers. Each entry links its source.