Australian Utilities Increasingly Targeted by Cyberattacks as Threats Escalate

by Team Confer · April 8, 2025

Australian utilities are increasingly vulnerable to cyberattacks, with a significant rise in incidents targeting critical infrastructure sectors such as electricity, gas, water, and waste services. Recent reports indicate that 62% of water and electricity operators have experienced cyberattacks in the past year, with 80% facing repeated incidents. Notably, nation-state groups are responsible for nearly 60% of these attacks, posing a growing risk to Australian utilities.

These cyber threats often involve compromising identity systems like Active Directory, Entra ID, and Okta, reported in 67% of incidents. The Australian Signals Directorate’s Cyber Threat Report highlights that the electricity, gas, water, and waste services sector accounts for 30% of attacks on critical infrastructure, surpassing other sectors such as education and transport. The potential economic impact of a cyber-induced shutdown is substantial, with projections estimating losses of up to USD $2.9 billion per day in worst-case scenarios.

Context & Background

Australia’s critical infrastructure has been increasingly targeted by cyberattacks in recent years. In 2022, EnergyAustralia experienced a breach that exposed sensitive customer data, affecting 323 residential and small business accounts. Similarly, in 2021, Queensland-owned electricity generator CS Energy was hit by a ransomware attack, which, although contained, highlighted the vulnerabilities within the sector. These incidents underscore the pressing need for enhanced cybersecurity measures to protect essential services from evolving threats.

In This Story

Australian Signals Directorate (ASD)

The Australian Signals Directorate is a government agency responsible for foreign signals intelligence, cyber warfare, and information security.

EnergyAustralia

EnergyAustralia is one of the country’s leading electricity and gas retailers, providing energy services to residential and business customers.

CS Energy

CS Energy is a Queensland government-owned corporation that generates and sells electricity in the National Electricity Market.

Semperis

Semperis is a cybersecurity company specializing in identity-driven protection, detection, and response solutions for Active Directory and Entra ID environments.

Chris Inglis

Chris Inglis is a strategic advisor at Semperis and former U.S. National Cybersecurity Director, known for his expertise in national security and cybersecurity.

Mickey Bresman

Mickey Bresman is the Chief Executive Officer of Semperis, leading the company’s efforts in providing cybersecurity solutions for identity systems.

You may also like