Breach right now?

Media kit

What Breach Response is

Breach Response (breachresponse.com.au) is a free, plain-English guide that helps Australian small businesses prevent data breaches, take the right first steps if one happens, and work out who they need to tell. It is run by a collective of experienced web and application developers based in Melbourne. Sponsored by Lightning Ventures as a free public initiative.

Fact sheet

  • Live now: data breach first steps; “Do I have to report it?” (OAIC Notifiable Data Breaches summary); Melbourne and Victoria contacts, including OVIC; website stack security guides for WordPress, WooCommerce, PHP, Node.js and more, starting with the PHP + WordPress breach guide.
  • Coming soon: a breach news section (not yet live).
  • Cost: free. Guides are free to use and share, licensed under CC BY 4.0.
  • Based in: Melbourne, Victoria.
  • Sponsor: Lightning Ventures (ABN 82 660 813 972).
  • Sources: every obligation links to its official source, mainly the OAIC and cyber.gov.au. See sources we rely on.

Key statistics

Each figure is from the linked source, as at 4 November 2026. Please cite the original source.

  • $56,600: Average self-reported cost of cybercrime per report for a small business in FY2024–25, up 14% (exact figure $56,571, up from $49,615). Source: ASD’s ACSC, Annual Cyber Threat Report 2024–25.
  • 1,205: Data breach notifications to the OAIC in calendar 2025, the highest since the scheme began in 2018 and up 8% on 2024 (1,112). 716 came from malicious or criminal activity. Source: OAIC media release.
  • 26%: Victoria’s share of ReportCyber cybercrime reports in FY2024–25 (Queensland 28%, NSW 22%). Source: ASD’s ACSC, Annual Cyber Threat Report 2024–25 (Figure 7).
  • 84,700+: Cybercrime reports to the ACSC in FY2024–25, about one every 6 minutes. Email compromise (19%) and business email compromise fraud with financial loss (15%) were the top self-reported threats for business; phishing was recorded in 60% of incidents the ACSC responded to. Source: ASD’s ACSC, Annual Cyber Threat Report 2024–25.
  • 28%: Rise in publicly reported CVEs in FY2024–25. “Exploit Public-Facing Application” featured in 10% of industry incidents. Source: ASD’s ACSC, Annual Cyber Threat Report 2024–25.
  • 82%: Australians concerned about data breaches, the top perceived privacy risk, up from 74% in 2023 (OAIC 2026 Australian Community Attitudes to Privacy Survey). Source: OAIC media release.

Spokesperson

Dave McManus, Director, Lightning Ventures.

[PLACEHOLDER: Dave's bio, 50 and 150 words.]

[PLACEHOLDER: Dave's headshots, landscape and portrait, high-res.]

Logos

Breach Response wordmark. Please do not alter the colours or proportions.

[PLACEHOLDER: Lightning Ventures logo, to be supplied by Dave.]

Screenshots

Disclaimer

Breach Response is independent. It summarises and links to guidance from the OAIC and ASD’s ACSC, and is not affiliated with or endorsed by either agency or any other government body. Content is general information, not legal advice.

Media contact

[PLACEHOLDER: media contact name, email and phone.] Time zone: Melbourne (AEST/AEDT).