Australia arrests alleged TeamPCP hackers behind supply-chain attacks

TeamPCP is a hacking collective responsible for extensive developer supply-chain attacks over the past year. They injected malicious code into open-source repositories, which was then incorporated into applications used by government, academic, and private sectors worldwide. The attacks led to the theft of approximately half a million credentials and exfiltration of at least 300GB of data. The Australian Federal Police, FBI, and Western Australia Police arrested two alleged members in August 2026. The suspects face multiple charges including possession and supply of data for computer offenses and dealing with criminal proceeds. The investigation continues with seized devices under forensic analysis.

The supply-chain attacks attributed to TeamPCP compromised over a thousand organizations globally, resulting in the theft of half a million credentials and exfiltration of at least 300GB of data. The financial impact of remediation efforts is estimated in the hundreds of millions of dollars. The compromised software components were widely trusted, amplifying the global impact across government, academic, and private sectors.

No specific patch or remediation is applicable as this is a law enforcement action against threat actors rather than a software vulnerability. Organizations should review their supply-chain security and credential management in light of the disclosed attacks. The arrests may disrupt TeamPCP operations, but further investigation and monitoring are advised. No direct vendor advisory or patch information is available.