Editor's Desk: ACSM E-mag Issue 5
Australia’s approach to data privacy has evolved significantly in 2018, with stricter reporting under the Notifiable Data Breaches (NBD) scheme. The latest figures reveal a sharp rise in incidents, alongside a shift in their causes. Meanwhile, new threats like AI-driven fraud have emerged as major concerns for businesses and regulators alike.
The second NBD report highlighted a notable change in the root causes of data breaches. Malicious or criminal activity now accounts for 59% of cases, overtaking human error, which stands at 36%. This marks a clear shift from previous trends where accidental leaks dominated.
Reported breaches have surged dramatically since March. The number of incidents climbed from 63 in the early stages to 242 in the most recent report. Officials attribute this rise to improved awareness of the legislation and better compliance with reporting requirements. One of the most pressing issues has been the rise of AI-powered fraud schemes. In Australia, so-called 'Ghost Stores'—fake online shops designed to steal data—have become a major problem. During the 2025 pre-Christmas season, cybersecurity firm Avast blocked over 430,000 attempts to access these fraudulent sites. While the introduction of GDPR in Europe initially caused widespread concern, the focus has since returned to practical security measures. In Australia, the NBD scheme has brought greater transparency, with the Office of the Australian Information Commissioner (OAIC) now publishing quarterly breach reports. One tangible benefit of GDPR has been simpler opt-out processes for unwanted marketing communications. Security vendors have often used alarmist tactics around regulatory changes like GDPR. However, as the initial panic subsided, businesses have turned their attention to implementing real, effective safeguards.
The latest NBD report underscores Australia’s growing ability to track and respond to data breaches. With malicious attacks now the leading cause, businesses face increasing pressure to strengthen defences. The surge in AI-driven fraud, particularly through fake online stores, highlights the need for more advanced cybersecurity measures in the coming years.
