ANZ organisations focus on IP & data as cyber threats surge

Arctic Wolf has released its 2025 Trends Report showing that IP, data, and privacy protection have become the top cybersecurity priorities for organisations in Australia and New Zealand (ANZ) amid tightening regulations and an uptick in ransomware attacks.

According to the report, which is based on a survey of over 1,200 senior IT and cybersecurity decision-makers across 15 countries, security leaders and decision-makers in ANZ are responding to a shifting risk environment by prioritising the protection of intellectual property, as well as privacy and data.

The survey found that 45% of respondents in ANZ identified intellectual property, data, and privacy protection as the primary drivers shaping their security strategy over the next year. This contrasts with global findings, where the adoption of artificial intelligence (AI) was the top driver for security leaders, including in North America (48%) and Europe (43%).

The report highlights that 85% of ANZ respondents experienced a cyberattack in the last 12 months, which is higher than the global average of 76%. ANZ organisations are also 9% more likely than the global average to experience a significant cyberattack.

Victim organisations in ANZ demonstrate a higher likelihood to pay ransom demands compared to the global average. The findings indicate that 74% of ANZ respondents paid ransoms to prevent the release of stolen data, compared to 50% globally. Among all respondents hit by ransomware demands, 83% of those in ANZ paid, similar to the global average (76%). Of those local respondents, 91% engaged professional ransomware negotiators, resulting in reduced payment sums in 44% of cases.

Mark Thomas, Director of Security Services, ANZ at Arctic Wolf, commented on these trends, saying, "The 2025 Trends Report shows that security leaders in Australia and New Zealand are facing a different bottom line. Here, organisations are grappling with a unique set of challenges spurred on by stringent regulatory and compliance frameworks and an uptick of ransomware attacks. It's no surprise that the key drivers for security strategies reflect the broader business trends we're seeing in region."

He added, "With Australia tightening its mandatory ransomware reporting payment requirements and sanctions introduced under the Cyber Security Act, we may see the 83% of organisations willing to pay ransoms reassess their approach to dealing with demands, even with the help of a negotiator."

The regulatory landscape in Australia is set to change further with new ransomware reporting requirements and privacy laws, bringing increased compliance scrutiny to local businesses. This evolving environment demands that executives and IT decision-makers carefully consider business-critical priorities while adapting to emerging risks and regulatory obligations.

Dan Schiappa, President, Technology and Services at Arctic Wolf, shared his perspective, stating, "Arctic Wolf's 2025 Trends Report offers a telling snapshot of how security leaders are thinking. AI's rapid emergence is creating new uncertainty, not only in how attackers operate but also in how defenders must respond. At the same time, ransomware remains a persistent and costly threat. As organisations race to implement AI-powered tools, it is critical they also do not lose sight of core security fundamentals like patching vulnerabilities, implementing detection and response, and maintaining a current incident response plan."

The report also notes that, in addition to compliance pressures, challenges for ANZ organisations include limited visibility into cyber risks, outdated incident response plans, and ongoing budget constraints.

As small and medium-sized businesses (SMBs) with a turnover of under AUD $3 million consider how new reporting obligations might affect them, industry participants are debating whether such requirements will act as a deterrent for attackers or could inadvertently increase risk by making SMBs more attractive targets.

With these findings, the Arctic Wolf 2025 Trends Report provides insight into the factors shaping cybersecurity investment and strategy decisions among organisations in ANZ in the context of a fast-changing threat and regulatory environment.