1 in 10 ASX 200 Companies Infected by Dark Web Infostealers

• •10% of ASX 200 companies have confirmed infostealer infections.
• •The average cybersecurity score for ASX 200 companies is 728.5, indicating a B rating.
• •Encryption is identified as the weakest link in cybersecurity for the second consecutive year.

UpGuard's 2025 ASX 200 Cybersecurity Report reveals that 10% of Australia's largest listed companies are infected with infostealers, primarily targeting identity credentials. The report highlights a slight improvement in overall security ratings, with an average score of 728.5, but emphasizes that this improvement is largely reactive, stemming from post-incident fixes rather than proactive measures. The research indicates that security scores stagnate until major incidents trigger temporary remediation spikes. The report also notes that encryption remains the weakest technical category, posing significant data privacy risks. Additionally, the reliance on common SaaS platforms creates a supply chain risk, where vulnerabilities can affect multiple organizations. The findings call for a shift towards continuous cyber risk posture management to enhance security resilience.