ASD’s ACSC manages or uses several unique datasets to produce tailored advice and assistance for Australian organisations and individuals. Not all cybercrimes lead to cyber security incidents, and the statistics in this report are from 2 distinct datasets: cybercrimes reported to law enforcement through ReportCyber, and cyber security incidents responded to by ASD’s ACSC. Data has been extracted from live datasets of cybercrime and cyber security reports disclosed to ASD’s ACSC. The self-reported ReportCyber statistics used throughout this Annual Cyber Threat Report serve as a guide to indicate cyber threats that individuals and organisations are currently experiencing. As such, the statistics and conclusions in this report are based on point-in-time analysis and assessment. Cybercrime and cyber security incidents reported to ASD’s ACSC will not reflect all cyber threats and trends in Australia’s cyber security environment.
ASD’s ACSC encourages the reporting of cybercrimes, cyber security incidents and vulnerabilities to inform ASD’s ACSC advice and assistance and enhance situational awareness of the national cyber threat environment.
Percentage changes of less than 5% are considered to represent a similar or consistent trend. Accordingly, such variations may not be specifically highlighted within this report.
Glossary
ASD’s ACSC glossary provides definitions for terms used in this report and other ASD ACSC publications.
AI use disclaimer
Artificial Intelligence tools were used sparingly throughout the production of this report. All AI-assisted outputs were reviewed by human contributors to ensure accuracy, appropriateness, and alignment with ethical standards.
