Rising Ransomware Threats in 2025: Australia’s New Cyber Reality

The cyber landscape in Australia and New Zealand is hitting a rough patch in 2025, besieged by a worrying increase in ransomware attacks. With Australia’s high income levels and rich resources, it’s become a prime target for cybercriminals. This year alone, 71 ransomware incidents were reported, overshadowing New Zealand’s nine cases.

While the numbers might seem small compared to the bustling hubs of the U.S. and Europe, Australia’s smaller population means its incidents per capita are actually quite high. For perspective, Italy, with over double Australia’s population, has logged 118 attacks this year, putting it at fifth on the global stage.

No single ransomware group holds the deed to the threat landscape here. Groups like Qilin, Akira, and INC have each pulled off eight attacks, followed closely by Lynx and Dragonforce. Their targets? Mostly professional services and healthcare, but they’re not stopping there – multiple other sectors have felt their sting.

The Big Hits: A Look at Major Ransomware Incidents

• Akira Group: Invaded an Australian operational technology firm, exfiltrating 10GB of sensitive corporate data.
• Political Breach: Hackers accessed secure emails and identity records of an Australian political party.
• Dragonforce’s Rampage: Exposed over 100GB from an engineering firm, including technical drawings and health reports.
• VanHelsing Group: Disrupted a medical technology firm, stealing vital employee and operational data.
• RansomHub: Allegedly infiltrated a pharmaceutical giant, seizing 40GB of sensitive material.

The consequences of these attacks are unfolding daily, driven by ransomware groups who are continuously evolving and fine-tuning their assaults. The key to countering these threats lies in fortifying cybersecurity frameworks with measures like asset segmentation, zero trust, backups, and robust endpoint defenses.

Organizations should invest in tools that offer wide-ranging visibility along with threat detection capabilities. Keeping incident response plans sharp and always on the lookout for warning signs can go a long way in strengthening resilience against these cyber onslaughts.

For those looking to deepen their understanding of Australia’s cybersecurity climate, attending Cyble’s upcoming webinar on APRA compliance could be invaluable. Staying vigilant and proactive is the way forward to fend off ransomware warriors.

Enhance your organization’s cybersecurity strategies with Qsentinel. Discover comprehensive security solutions tailored to protect your digital assets.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.