Home · Wiki · Incidents & Campaigns
type: incident · created: 2026-08-28 · updated: 2026-09-18 · tags: [cyber, incident] · confidence: high · severity: high · affected_sectors: [technology] · au_impact: true

The Australian Federal Police charged two Perth-based men, Ruben Ian Thomson, 21, of Cottesloe and Louis Michael Gaebler, 23, of Mandurah, with 14 combined offences over their alleged role as principal participants in TeamPCP, the cybercrime group responsible for one of the year's most damaging hacking campaigns. FBI assistant director Brett Leatherman alleged the pair and their syndicate potentially compromised more than a thousand organisations worldwide, while Australian investigators estimate more than 500,000 credentials exposed and at least 300 GB of data stolen. TeamPCP has carried out supply-chain attacks since March, most often against open-source developer tooling including TanStack, Trivy and LiteLLM, with confirmed victims including the European Commission and GitHub; convicted on every count, the two could face a combined 82 years.

Source

  • The Record
  • Captured via /raw/digests/Cyber-Digest-2026-08-28.md