What happened

ASIO disclosed that nation-state hackers compromised the network of an unnamed Australian critical-infrastructure provider, acquired credentials belonging to active users including IT and network-defence personnel, mapped the network and maintained persistent access. ASIO assessed the operation as preparation for sabotage, identified and attributed the intrusion internally, and worked with the victim and security partners on continuing remediation. The agency did not publicly identify the provider, its sector, the responsible state, the compromise date or any operational disruption. Energy and communications were described as top targets generally, not as confirmation that this victim was an energy company. This marker is therefore placed at country level and does not represent a facility outage.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.