Annual Cyber Threat Report 2025-26

The Australian Federal Police

The Australian Federal Police (AFP) is responsible for enforcing Commonwealth criminal law; contributing to combatting complex transnational, serious, and organised crime that impacts Australia’s national security; and protecting Commonwealth interests from criminal activity in Australia and overseas. Operation Aquila leverages the complementary powers, capabilities and intelligence of ASD’s ACSC and the AFP to disrupt the most serious cybercrime threats facing Australia. The AFP-led Joint Policing Cybercrime Coordination Centre brings together Australian law enforcement and key industry and international partners to inflict maximum impact on high volume, high harm cybercrime affecting the Australian community.

The Australian Security Intelligence Organisation

The Australian Security Intelligence Organisation (ASIO) is Australia’s security intelligence service. It protects Australia and Australians from threats to their security, including terrorism, espionage, sabotage, and interference in Australia’s affairs by foreign governments. ASIO’s cyber program is focused on investigating and assessing the threat to Australia from malicious state-sponsored cyber activity. ASIO’s contribution to ASD’s ACSC includes intelligence collection, investigations and intelligence-led outreach to business and government partners.

The Australian Institute of Criminology

The Australian Institute of Criminology (AIC) is Australia’s national research and knowledge centre on crime and justice. The AIC informs crime and justice policy and practice in Australia by undertaking, funding and disseminating policy-relevant research of national significance.

The Department of Foreign Affairs and Trade

The Department of Foreign Affairs and Trade (DFAT) promotes and protects Australia’s international interests to support our security and prosperity. DFAT leads Australia’s international engagement on cyber and critical technology across the Australian Government. This work is coordinated by Australia’s Ambassador for Cyber Affairs and Critical Technology. DFAT is leading on the international elements of the 2023–2030 Australian Cyber Security Strategy, the development of which is being coordinated by the Department of Home Affairs.

The Department of Home Affairs

The Department of Home Affairs is responsible for the leadership and central coordination of policy, programs and regulations relating to national security and resilience, law enforcement, migration and citizenship, multicultural affairs, and border management and security. The Department of Home Affairs leads the development of cyber security policy, including the implementation of the 2023–2030 Australian Cyber Security Strategy.

The National Cyber Security Coordinator

The National Cyber Security Coordinator, supported by the National Office of Cyber Security, leads the coordination of national cyber security policy, responses to major cyber incidents, whole-of-government cyber incident preparedness efforts and the strengthening of Commonwealth cyber security capability. The Coordinator also oversees the implementation of the 2023–2030 Australian Cyber Security Strategy.

The National Anti-Scam Centre

The National Anti-Scam Centre, run by the ACCC, brings together experts from government, law enforcement and the private sector to disrupt scams before they reach consumers. The Centre is collectively committed to making Australia a harder target for scammers and reducing the financial and emotional harm caused by scams. The Centre does this through collecting quality scam reports through our Scamwatch service, collaboration (technology and intelligence sharing), disruption, awareness and protection.

The Australian Prudential Regulation Authority

The Australian Prudential Regulation Authority (APRA) is Australia’s prudential regulator and is responsible for promoting the safety and stability of the financial system. APRA supervises banks, insurers and superannuation entities, setting prudential standards and overseeing resilience, risk management and financial soundness across the sector.

The Defence Intelligence Organisation

The Defence Intelligence Organisation co-leads the ACSC’s cyber threat assessment team in partnership with ASD to provide the Australian Government with an all-source strategic, cyber threat intelligence assessment capability.

The Office of the Australian Information Commissioner

The Office of the Australian Information Commissioner (OAIC) regulates the compliance of Australian government agencies, organisations with an annual turnover of more than $3 million and the compliance of some other organisations with the Privacy Act 1988 and other laws when handling personal information.