2025 was a big year for cybercrime in Australia — ransomware, business email compromise and AI-supercharged scams all climbed. Here's a quick roundup and a practical plan for 2026.
What happened in 2025
Reports to the ASD kept rising, average incident costs went up, and attackers leaned hard on AI to make scams more convincing. Small businesses bore a disproportionate share.
Your 2026 action plan
- Turn on multi-factor authentication everywhere it's offered
- Test your backups — an untested backup isn't a backup
- Run one short staff scam-awareness session
- Review who has admin access and remove what's stale
- Write a one-page "what to do if we're hacked" plan
None of these are expensive; all of them pay off. If you'd like help working through the list, take the Risk Check or get in touch.