What should I do if my business has a cyber attack?

Common question · Technology & IT Law · Australia · 23 October 2026

General information from Lawmateanz

Contain the incident by isolating systems and changing passwords, and get IT help.

Report it through ReportCyber, run by the Australian Signals Directorate's Australian Cyber Security Centre. Some businesses must report ransomware payments.

If personal information is involved, you may need to notify the OAIC and affected people.

Notify your insurer and get legal advice.

Written by Lawmateanz, not by a lawyer. General information only, not legal advice about your situation. For advice about your own matter, talk to a lawyer.

Lawyer answers

Lawyers listed on Lawmateanz can answer this question. If you asked it, we'll email you as soon as it's answered.

Need help now? Get matched with a lawyer

Are you a lawyer? Answer this question · List free on Lawmateanz

Related questions

More about Technology & IT Law →

General information only. Answers are written by independent lawyers based only on what's in the question. They aren't legal advice about your situation and don't create a lawyer–client relationship. For advice about your own matter, talk to a lawyer directly.

Ask your own questionGet matched with a lawyer