--- title: "Australia's 1,205 Data Breaches: What the Numbers Miss" description: Australia hit a record 1,205 data breaches in 2025. Learn why shared devices raise your risk and how stateless endpoints keep data off the device. image: https://www.cxanz.com/hubfs/FIL_CX_GEO_Blog%204%20-%20Nov%2026.jpeg --- [![CXANX+Citrix LockUp Black](https://www.cxanz.com/hs-fs/hubfs/CXANX+Citrix%20LockUp%20Black.png?width=300&height=40&name=CXANX+Citrix%20LockUp%20Black.png "CXANX+Citrix LockUp Black")](https://www.cxanz.com/) [![CXANZ+Citrix LockUp Black RGB](https://www.cxanz.com/hubfs/Australia/Projects/CXANZ/AUS-HSM-CXANZ/Brand%20Assets/CXANZ+Citrix%20LockUp%20Black%20RGB.svg "CXANZ+Citrix LockUp Black RGB")](https://www.cxanz.com/) - [Home](https://www.cxanz.com) - [Partners](https://www.cxanz.com/partners) - [Customers](https://www.cxanz.com/customers) - [Blog](https://www.cxanz.com/blog) - Resources - [Find a Partner](https://www.cxanz.com/psp-partners) - [Contact Us](https://www.cxanz.com/meet-the-team) - [Home](https://www.cxanz.com) - [Partners](https://www.cxanz.com/partners) - [Customers](https://www.cxanz.com/customers) - [Blog](https://www.cxanz.com/blog) - Resources - [Find a Partner](https://www.cxanz.com/psp-partners) - [Contact Us](https://www.cxanz.com/meet-the-team) # Australia's 1,205 Data Breaches: What the Numbers Don't Show By [**Roshantha Pillay**](https://www.cxanz.com/blog/author/roshantha-pillay) on Oct 28, 2026, 4:01:28 PM ![\Australia's 1,205 Data Breaches: What the Numbers Don't Show\](https://www.cxanz.com/hs-fs/hubfs/FIL_CX_GEO_Blog%204%20-%20Nov%2026.jpeg?width=6188&height=1857&name=FIL_CX_GEO_Blog%204%20-%20Nov%2026.jpeg) In April 2024, MediSecure, an electronic prescription provider, was hit by ransomware. The personal and health information of 12.9 million Australians was compromised, and the company later entered liquidation. Incidents of that scale are rare but breaches themselves are not. In 2025, Australian organisations reported 1,205 data breaches, [the highest annual total since mandatory reporting began](https://www.oaic.gov.au/news/media-centre/data-breach-notifications-increase-to-all-time-high-in-2025,-new-ndb-stats-show). The number tells us how often breaches occur. It tells us nothing about the operational impact when they do. A single incident can shut down systems, disrupt frontline services and leave thousands of employees unable to work. The real question isn't how often organisations are breached. It's how quickly they can recover when they are. ## Who Is Being Breached Health service providers reported the highest number of data breach notifications in 2025, with **225 notifications**, representing **19% of all reported breaches**. Financial services followed with **157 notifications**, followed by the Australian Government (**118**), business and professional associations (**103**), education (**81**), and legal, accounting and management services (**81**). [\[oaic.gov.au\]](https://www.oaic.gov.au/news/media-centre/data-breach-notifications-increase-to-all-time-high-in-2025,-new-ndb-stats-show) Health has consistently been one of the most affected sectors since mandatory reporting began. The majority of breaches reported in 2025 were attributed to malicious or criminal activity, with cyber incidents remaining the leading cause of reported breaches. [\[oaic.gov.au\]](https://www.oaic.gov.au/news/media-centre/data-breach-notifications-increase-to-all-time-high-in-2025,-new-ndb-stats-show) None of this is particularly surprising. These sectors hold sensitive information with long retention periods, support large and diverse workforces, and often operate across multiple locations. That combination makes them attractive targets and increases the complexity of protecting data at scale. ## Why the Endpoint Still Matters Breach analysis tends to focus on the point of entry. The endpoint matters for a different reason: it is often where data comes to rest. A laptop that stores documents locally, holds cached credentials, retains browser sessions and stores downloads from software-as-a-service applications becomes a repository of organisational data in its own right. It travels, it gets lost, and it is often shared between multiple users over its lifetime. This is why endpoint models that minimise or eliminate local data storage change the shape of the problem rather than simply adding another layer of control. With Citrix UniconOS, the operating system is immutable and reset on reboot. While temporary browser caches and session data may exist during use, they are cleared when the device restarts. The result is an endpoint that retains no persistent user data, reducing the risk associated with lost, stolen or shared devices. This is particularly valuable for shared workstations in hospitals, clinics, branches, contact centres and depots, where the same device may be used by dozens of people over the course of a day. ### There's a particular version of the data-at-rest problem that often gets overlooked: shared devices. A nurses' station, branch counter, depot terminal or school computer lab may be used by dozens of people across a day, often with no single owner responsible for the device. Over time, these endpoints can accumulate cached files, saved sessions, downloaded attachments and browser history belonging to multiple users. They're also among the easiest devices to overlook during audits and reviews because responsibility is shared across teams, shifts and locations. This is where endpoint design matters. You can't lose, expose or steal data that isn't stored there in the first place. An endpoint that retains little or no persistent user data significantly reduces the risk associated with shared use. When devices are reset between sessions and user activity isn't stored locally, there is less information available to be accidentally exposed, misplaced or exfiltrated. Interestingly, the sectors that report the highest number of data breaches, including healthcare, education, government and financial services, are also among the most likely to rely on shared devices. While that correlation doesn't prove causation, it does highlight the importance of considering how endpoint design contributes to organisational risk. ## Three Questions Worth Asking - What organisational data is currently stored on end-user devices, and could we accurately quantify it? - How many of our devices are shared by multiple users across a day or shift? - If a device were lost tomorrow, what information would actually be on it? Many organisations find the third question harder to answer than they expect. ## How can Citrix help? CXANZ is the local Citrix team across Australia, New Zealand and the Pacific, backed by global expertise and focused on helping customers and partner’s win. Understanding where your data resides is often the first step to reducing risk. During a [complimentary 60-minute Citrix Review](https://www.cxanz.com/resources/citrix-review), our CXANZ | Citrix Solutions Experts assess your approach to access, endpoints and data control. You'll receive a written summary, prioritised recommendations and a practical roadmap for next steps. There is no cost, no obligation, and if your current environment is already well positioned, we'll tell you.   Previous Blog [← Extending Device Life Without Extending Risk](https://www.cxanz.com/blog/persona-based-licensing-endpoint-costs) ![CXANX+Citrix LockUp White](https://www.cxanz.com/hs-fs/hubfs/CXANX+Citrix%20LockUp%20White.png?width=300&height=40&name=CXANX+Citrix%20LockUp%20White.png) Cloud Software Group and any trademarks, service marks, trade names, and logos of Cloud Software Group (including Citrix and NetScaler) are owned by Cloud Software Group, Inc. and/or its affiliates and are used by Dicker Data under license from Cloud Software Group, Inc. Dicker Data Ltd is a strategic partner of Cloud Software Group, Inc. and is not a corporate subsidiary or agent of Cloud Software Group, Inc. and/or of its affiliates. Copyright © 2026 Dicker Data Ltd. All rights reserved. ABN 95 000 969 362 - [Privacy Policy](https://www.cxanz.com/privacy-policy) - [LinkedIn](https://www.linkedin.com/company/cxanz) - [YouTube](https://www.youtube.com/@CXANZCitrix) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Roshantha Pillay", "url" : "https://www.cxanz.com/blog/author/roshantha-pillay" }, "dateModified" : "2026-10-28T05:01:43.181Z", "datePublished" : "2026-10-28T05:01:28.000Z", "headline" : "Australia's 1,205 Data Breaches: What the Numbers Miss", "image" : [ "https://www.cxanz.com/hubfs/FIL_CX_GEO_Blog%204%20-%20Nov%2026.jpeg" ], "mainEntityOfPage" : { "@id" : "https://www.cxanz.com/blog/australia-data-breaches-2025-endpoints", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.cxanz.com/hubfs/assets/logos/CXANZ-DD-AU.svg" } } } ```