The Office of the Australian Information Commissioner (OAIC) has launched a new Notifiable Data Breaches (NDB) statistics dashboard that allows the public to access, analyse and benchmark data received under the Notifiable Data Breaches (NDB) scheme.
It has been created to help reporting entities, media and the public understand the volume and type of data breaches notified to the OAIC.
It provides a more dynamic view of the information previously contained in the OAIC’s NDB reports and will be updated every six months.
Australian Privacy Commissioner Carly Kind said the NDB dashboard highlights the OAIC’s commitment to harnessing data to inform and educate, but also to take a data-driven approach to regulatory action.
“Our goal for the new NDB dashboard is to help reporting entities learn from the experiences of others – those organisations and agencies who have had to notify us of a data breach. We hope the tool is used to improve their own responses and reporting if a data breach occurs,” Commissioner Kind said.
“As a regulatory body, we want to be proactive in guiding organisations, using education and data-informed decision-making to protect Australians’ personal information.”
The dashboard contains new statistics for January to June 2025. These show the OAIC was notified of 532 data breaches during the period, a 10% decrease compared with the previous six months.
Malicious or criminal attacks remained the largest source of data breaches (59%, at 308 notifications). The health sector continues to have the most reported data breaches (18% of reported data breaches), followed by the finance sector (14%) and Australian Government agencies (13%).
“The threat of data breaches, especially through the efforts of malicious actors, is unlikely to diminish, so we want to arm entities with data to help them keep personal information secure and to ensure they have an appropriate action plan should a breach occur,” Commissioner Kind said.
In addition to the statistics dashboard, the OAIC has also published a blog that includes a case study about outsourcing personal information handling to third parties, and with links to guides and resources to help entities prepare and respond to a data breach.
Last week, online wine wholesaler Vinomofo was found by the OAIC to have “interfered” with the privacy of almost a million individuals by failing to protect their personal information from security risks that led to a data breach.
Earlier this year, the OAIC filed civil penalty proceedings in the Federal Court against Optus following the company's 2022 data breach.
_(11).jpg&h=142&w=230&c=1&s=1)
.jpg&w=100&c=1&s=0)
_(8).jpg&w=100&c=1&s=0)
.jpg&q=95&h=298&w=480&c=1&s=1)
