Two Australians Charged in Global TeamPCP Supply-Chain Cyberattack Two Western Australian men, aged 21 and 23, have been charged with 14 offenses related to a sophisticated supply-chain attack allegedly orchestrated by the cybercriminal group TeamPCP. The Australian Federal Police (AFP), in collaboration with the Western Australia Police Force (WAPF) and the FBI, arrested the suspects on 26 August 2026 following search warrants executed in Perth, Cottesloe, Hamilton Hill, and Mandurah. Authorities allege the men were key figures in a syndicate that inserted malicious code into open-source software repositories, which was then unknowingly integrated into systems by developers worldwide. The compromised components spread across government, academic, and private-sector organizations, leading to the theft of over 500,000 credentials and the exfiltration of at least 300GB of data. The attack potentially impacted more than 1,000 organizations globally, with remediation costs estimated in the hundreds of millions of dollars. The investigation began in April 2026 after cybersecurity firms flagged the campaign. The suspects are accused of data intrusion, identity crime, and cryptocurrency-based money laundering, with seized devices still under forensic analysis. The 21-year-old from Cottesloe faces eight charges, including unauthorized data modification and dealing in proceeds of crime, while the 23-year-old from Mandurah faces six similar offenses. Both are scheduled to appear in Perth Magistrates Court on 27 August 2026. FBI Cyber Division Assistant Director Brett E. Leatherman stated the arrests impose significant costs on those behind software supply-chain attacks. AFP Commander Graeme Marshall noted that cybercrime syndicates increasingly operate like professional enterprises, emphasizing the role of industry intelligence in disrupting such threats. The investigation remains ongoing, with further arrests not ruled out.