Strategic Cyber Breaches Expose Australia’s Infrastructure Risks

Australia faced a string of cyber attacks this week that struck defence and industrial sectors, exposing the very weaknesses ASIO Director Mike Burgess has been warning about. His concerns about persistent state sponsored intrusions come as evidence of deep compromise and operational damage continues to build across national infrastructure.

On 9 November 2025, Iran backed hacktivist group Cyber Toufan leaked confidential 3D renderings and technical specifications of Australia’s $7 billion Redback infantry fighting vehicle program. This breach stemmed from their penetration of Israeli defence suppliers, with the Australian data exposed as collateral in a wider operation. The incident highlights the risks in global supply chains and the ripple effects of international cyber warfare on Australian defence assets. Authorities are now assessing the scope of compromised information and the implications for national security.

In a separate but equally troubling event, IKAD Engineering, a company serving defence, marine and energy sectors, confirmed it had been infiltrated by the J Group ransomware gang. Attackers operated undetected for five months, exploiting an outdated VPN appliance to exfiltrate eight hundred gigabytes of sensitive data, establish persistence tools and capture credentials. In response, IKAD engaged key national and state agencies, which signals the seriousness and reach of the incident.

IKAD has publicly acknowledged the breach, confirming that attackers gained unauthorised access to internal systems and accessed company data. The statement below was published on the company’s website and outlines the steps taken in response, including engagement with national and state cyber security agencies.

Repeated breaches raise the stakes for business leaders and reinforce the urgency of ASIO’s warnings about hostile actors mapping, embedding and preparing for large scale infrastructure disruption.

Director General Mike Burgess has cautioned that foreign government backed actors, especially those linked to China and Russia, are no longer simply testing defences but are actively carving out persistent and covert access across Australia’s critical infrastructure networks. Their objective is to lay the groundwork for large scale disruption at their choosing, with the potential for billions in economic losses per incident and serious consequences for public safety and national stability.

The blending of state backed espionage, criminal ransomware activity and cross border supply chain weaknesses revealed this week strengthens the case for board level vigilance and investment. Burgess’s message is clear. These threats are not abstract, and the country’s security and prosperity rely on a rapid and coordinated defensive posture. Australia cannot afford to underestimate the sophistication or the intent of its adversaries as cyber pressure intensifies across vital sectors.

Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.