Two Australians Charged Over TeamPCP Supply-Chain Attacks That Hit 1,000+ Organizations
Brief
Two Western Australian men have been charged over alleged TeamPCP supply-chain attacks that police say planted malicious open-source code and reached more than 1,000 organizations worldwide.
The Australian Federal Police charged the pair on 26 August 2026 with a combined 14 offenses after search warrants in Perth, working with the Western Australia Police Force and the FBI. Both men are due to appear in Perth Magistrates Court on 27 August 2026.
Police will allege the men were principal participants in a highly organized syndicate involved in data intrusion, identity crime and cryptocurrency-based money laundering. Investigators say the group inserted malicious code into software on an open-source repository that other developers then used unwittingly.