OAIC's Notifiable Data Breaches statistic dashboard
11 November 2025
The Office of the Australian Information Commissioner (OAIC) has created an interactive dashboard of data breach notifications it receives under the Notifiable Data Breach (NDB) Scheme.
The commissioner has for a number of years been releasing snapshots of data breaches for the previous six months, however this new dashboard is intended to 'help reporting entities learn from the experiences of others – those organisations and agencies who have had to notify us of a data breach. We hope the tool is used to improve their own responses and reporting if a data breach occur.’[1]
The dashboard allows users to:
- Apply filters such as changing the timeframe, or source of breach, response time or top industry sector.
- Click a button to provide further information about the data on the page.
- View the chart data as a table.
The dashboard will now be updated every six months.
Some interesting highlights from the dashboard include the following.
Decrease in notifications
The notifications of eligible data breaches were down -10% compared to July to December 2024. Notifications as a result of human error were up with almost all categories trending higher, while malicious attacks were down, most notably in the cyber incident category.
Source of data breaches
Malicious or criminal attacks remain the largest source of data breaches at 59%.
Top 5 reporting sectors
The top 5 sectors to notify data breaches included:
- Health service providers - 96
- Finance (including superannuation) - 73
- Australian Government - 67
- Education - 38
- Legal, accounting & management services - 37
Top causes of human errors breaches
- Personal Information sent to the wrong recipient (email) - 44%
- Unauthorised disclosure (unintended release or publication) - 22%
- Failure to use BCC when sending email - 9%
Time taken to identify and report breaches
There is an increase in businesses reporting in less than 10 days, showing increased responsiveness and a corresponding decrease in reporting taking longer than 30 days.
Conclusion
The dashboard provides meaningful insight into trends and patterns in relation to data breaches and seems to suggest an improved awareness and responsiveness to cyber risks while human error still serves as a not insignificant issue in data breaches.
[1] Office of the Australian Information Commissioner, media post, 4 November 2025, ‘OAIC launches new dashboard for data breaches,’ OAIC launches new dashboard for data breaches | OAIC.
