Annual Cyber Threat Report 2025-26

Australian organisations that have been, or may have been, impacted by a cyber security incident are encouraged to reach out to ASD’s ACSC. ASD’s ACSC offers free technical incident response advice and assistance, 24 hours a day, 7 days a week.

We also recommend responding to ASD’s ACSC when we reach out to you regarding a vulnerability, potential compromise or a confirmed compromise that could impact your organisation. If you are concerned about the legitimacy of a call, you can verify that you were speaking to a genuine representative of ASD’s ACSC by calling 1300 CYBER1 (1300 292 371) and quoting your incident/ reference number.

Report a cybercrime or cyber security incident

• Report at cyber.gov.au/report
• Call the 24/7 Australian Cyber Security Hotline on 1300 CYBER1 (1300 292 371)

Cybercrime reports are automatically referred to the relevant state or territory law enforcement agency. An incident does not have to be a confirmed compromise to be reported and could include:

• DoS
• scanning and reconnaissance
• unauthorised access to a network or device
• data exposure, theft or leak
• malicious code/malware
• ransomware
• a vulnerability
• phishing/spearphishing
• any other irregular cyber activity that causes concern.

How ASD’s ACSC can help

When you report, ASD’s ACSC will provide immediate incident response advice and assistance, which may include:

• providing information on how to contain and remediate the cyber security incident
• providing advisory products to assist you with your incident response
• linking you to Australian government organisations that may further support your response
• triaging the incident to determine if there are more detailed actions to be undertaken
• assessing whether the incident requires a more tailored approach, and, depending on the incident, we may offer:
  • a team of digital forensics specialists to support a comprehensive technical investigation
  • guidance on approaching public communications to ensure transparency while protecting the integrity of the technical investigation
  • information and reports to help you finalise your investigation
  • an introduction to different areas within ASD’s ACSC for additional support, such as cyber resilience uplift activities and, if requested, help you to contact the Department of Home Affairs or the AFP.

How your reporting matters

ASD’s ACSC uses anonymised information from your report to build our understanding of the cyber threat environment. This understanding assists with the development of new and updated advice, capabilities, techniques and products to better prevent and respond to evolving cyber threats.

Reporting an incident could be the key to preventing further victims.

Your confidentiality is paramount

ASD’s ACSC is not a regulator and does not share any information provided by you without your express consent. We are then legally bound to use your information for cyber security purposes only, to better assist you and protect the Australian community. Your confidentiality is further protected under ASD’s ACSC’s ‘limited use’ obligation.