Australian Small Firms Face Cyber Threats

Australian small businesses are confronting increasingly costly cybersecurity threats, with official figures showing that the average self-reported cost of cybercrime has reached A$55,400 per report. The findings have renewed attention on the challenges facing smaller organisations as federal lawmakers examine whether businesses have adequate access to affordable security advice and protection.

According to the Australian Signals Directorate's 2025–26 Annual Cyber Threat Report, the country's cybercrime reporting system received more than 82,000 reports during the financial year, equivalent to approximately one every six minutes. Medium-sized businesses experienced an average reported cost of A$141,300, representing a 45% annual increase. The average for small businesses remained broadly unchanged, although losses continued to represent a substantial financial burden.

The figures coincide with parliamentary hearings on cybersecurity support for smaller organisations, including a session scheduled for 2 November. Australia's House of Representatives committee is examining the practical difficulties businesses face when implementing protective measures, obtaining specialist services and managing cyber risks across their supply chains. Evidence from industries including finance, healthcare, telecommunications and professional services will inform its recommendations.

Smaller companies often rely on digital payments, cloud software and online communications without possessing the security resources available to larger organisations. A successful cyberattack can therefore disrupt operations, expose customer information and undermine business continuity. The parliamentary inquiry highlights the need to make cybersecurity guidance more accessible and relevant to firms with limited budgets. Its recommendations could influence future government support, particularly as increasingly sophisticated attacks place additional pressure on smaller enterprises.