Australian Authorities Arrest Two Alleged TeamPCP Members in Major Cybercrackdown

The Australian Federal Police (AFP) announced the arrest of two men aged 21 and 23 from Western Australia in connection with an alleged sophisticated cybercrime syndicate known as TeamPCP. According to the AFP statement, the suspects are believed to be members of a group accused of creating malicious open-source software to conduct supply chain attacks against thousands of global businesses. The AFP alleges TeamPCP is responsible for the longest running spree of software supply chain attacks ever, involving data extortion and widespread compromise.

KrebsOnSecurity reported in June 2026 that it had identified the real identity of the 21-year-old suspect and had been communicating with him since. The investigation into TeamPCP has been ongoing for an extended period, with the group being blamed for a sustained and extensive campaign targeting software supply chains. The arrests were executed on 2026-08-27. While the AFP did not name the defendants, the investigation reportedly relied on digital forensics and intelligence tracking of the group's open-source software distribution methods. The group's alleged activities have impacted a significant number of global businesses, though specific victim counts and details remain under investigation.

The arrests represent a major blow to a group that has been blamed for perpetrating some of the most persistent and far-reaching supply chain attacks observed in the cybersecurity landscape. Authorities have not released further details on the specific charges or the technical methodology used to identify the suspects, but the operation is understood to target the leadership of the syndicate.