www.adaca.com Australian Government Agencies Slow to Report Data Breaches Amid AI Threats
Article Content
- •Government agencies took an average of 108 days to report breaches, compared to three days for private companies.
- •There has been a 69% increase in reported data breaches from 2022 to mid-2026.
- •Government agencies have become the third-largest source of data breaches in Australia.
An analysis by Adaca reveals that Australian government agencies are significantly slower than private companies in reporting data breaches, averaging 108 days compared to just three days for private firms. The report, based on 4,769 notifications to the Office of the Australian Information Commissioner (OAIC) from 2022 to mid-2026, shows a 69% increase in reported breaches. Government agencies have become the third-largest source of breaches, with 399 incidents reported since 2022. Despite some improvements in reporting times in 2026, the public sector's lag in adopting AI-powered detection systems raises concerns about its ability to manage data security effectively. The findings highlight a disparity in breach reporting between public and private sectors, with calls for urgent reforms to enhance government cybersecurity capabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Common questions
How long does it take for government agencies to report breaches?
What percentage of breaches were reported within 10 days in 2026?
How many data breaches have been reported since 2022?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…