Australian Community Attitudes to Privacy Survey 

Data Breaches at Record High: Why Data Visibility Protects Your Organisation 

2025 OAIC Data Breach Analysis and a Data-First Defence Strategy – published by the OAIC July 2026. 

The Problem: Record Breach Notifications 

A summary of Data breach notifications from the OAIC published 6^th July 2026:- 

• 1,205 data breach notifications in 2025 – the highest year on record since 2018 

• +8% increase from 2024 

• 716 notifications (59%) caused by cyber hacking and criminal activity 

• 3.3 breaches reported per day on average 

• 82% of Australians concerned about data breaches 

• Up from 74% in 2023 

Most Affected Sectors 

Sector	Notifications	% of Total
Health Services	225	19%
Financial Services	157	13%
Australian Government	118	10%
Business & Professional Assoc.	103	8.5%

Health sector accounts for nearly 1 in 5 breaches. 

Why Breaches Keep Rising 

Most security issues begin with a single problem: lack of data visibility. Organisations are collecting more data than they can govern, protect, or use. When you cannot see what data you have, where it is stored, who has access, or how it is being used – you cannot defend it. 

The Solution: A Data-First Approach 

Genesys Data delivers a proven path to reducing breach risk through visibility, governance and control. 

Genesys Data helps organisations understand, govern and protect the information that matters most. Using automated discovery, classification and analytics, we help build visible, classified and governed data environments that reduce cyber risk, minimise data exposure and strengthen regulatory compliance. 

How Genesys Data Stops Breaches 

• Visibility and Discovery: Automated identification of all data across your organisation – eliminating the blind spots where breaches hide 

• Classification and Governance: Understanding what data you have, where it lives, and who should access it 

• Risk Protection: Prioritise and manage security controls for your most critical and sensitive data 

• Compliance Assurance: Meet Privacy Act obligations, demonstrate governance, and prepare for upcoming ADM (Automated Decision Making) transparency requirements 

• AI Governance: Build foundations for confident AI adoption with secure, well-governed data 

Why This Matters Now 

• Regulatory pressure is increasing: Privacy Act reforms in December 2026 introduces new obligations around ADM, transparency and accountability 

• Boards demand visibility: Organisations must demonstrate informed oversight of data, privacy and cyber risk 

• Vulnerable sectors are exposed: Health services (19% of breaches), financial services (13%), and government agencies face mounting risk 

• Public trust is eroding: 82% of Australians are concerned about data breaches – your organisation’s reputation depends on effective protection 

Next Steps 

The question is not whether your organisation will face a data breach attempt – it is whether you will have the visibility and governance to reduce the impact. 

A Data-First approach transforms risk into confidence. It gives you the visibility to see threats before they become breaches, the governance to control access and protect sensitive data, and the assurance to meet regulatory obligations. 

Learn how Genesys Data can strengthen your data protection posture. Visit www.genesysdata.com.au or email info@genesysdata.com.au to discuss a Data-First strategy tailored to your organisation. 

YOUR DATA IS YOUR BIGGEST RISK. AND YOUR GREATEST OPPORTUNITY. 

Source: OAIC Notifiable Data Breaches Statistics, 2025 Calendar Year Report (Published July 6, 2026)