Source of breach

Specific sources of breach, 1 July to 31 December 2025. The group totals are published figures; the specific rows are published under each group.

Malicious or criminal attacks60.4%basis: period

Human error29%basis: period

System faults5.2%basis: period

Cyber incidents37.8%basis: period

Specific sources of breach

basis: period (published report figure)

Source: the OAIC workbook 1 July to 31 December 2025 (as at 29 June 2026), data.gov.au dataset 5781dc17-2ad0-4dd1-bced-01c544943ce3.

Where did this come from?

The workbook prints the system-fault row Unintended release or publication twice; the normaliser keeps the first occurrence. The published group totals (35 = 8 + 27) are unaffected.