A 2027 U.S.–China conflict with Australia aligned to the U.S. China trade stops immediately, Taiwan exports are slowed/limited, and China launches large-scale cyber disruption in waves. This is a planning scenario, not a forecast. Planning scenario, not a forecast. No end date is set.

Data Centers & Digital Infrastructure — Australia (Investor-Grade, Downstream Focus)

Read the United States briefingReport date 2026-11-07

What happens

Australia's operating book is a colocation market in the hundreds of megawatts, not a hyperscale campus pipeline. NEXTDC reported 18 operating facilities. Built capacity on the same table is 287.9 MW. Billing utilisation was 175.0 MW. Billing utilisation was 61 percent of built capacity. Contracted utilisation of 740.1 MW is a pro forma sold book, including deferred commencement, and is printed at 257 percent of built capacity.
nextdc.com
The grid print is state demand, not that operator's bill. New South Wales data centre demand averaged 484 MW. The page prints a 40 percent rise from a year earlier for that series. Victoria data centre demand averaged 225 MW, up from 136 MW in the prior September quarter. Those two state series are not added here. The transmission queue totals 10.1 GW. That figure is maximum capacity load in a connection process, not energized demand.
aemo.com.au
Servers are an import. Computers were 22,007 million Australian dollars of goods imports in 2025-26, up 60.7 percent from a year earlier. Computers were 4.5 percent of goods imports. The factsheet does not split that line by partner. China at 27.0 percent and Taiwan at 2.6 percent are shares of all goods imports, not of computers.
dfat.gov.au
The accelerator inside those servers is a Taiwan exposure on the NVIDIA filing, not an Australian customs share. NVIDIA uses foundries such as Taiwan Semiconductor Manufacturing Company and Samsung to produce wafers, and it says component manufacture and final assembly are concentrated in China, Hong Kong, Israel, Korea, and Taiwan. Customers headquartered in Taiwan accounted for 42,345 million dollars of total revenue of 215,938 million dollars. The calculated headquarters share is 19.6 percent. The footnote estimates that 76 percent of Data Center revenue from Taiwan-headquartered customers was attributed to end customers based in the United States and Europe. That footnote does not measure the Taiwan content of a server in an Australian hall.
sec.gov nextdc.com
International traffic is a cable question. ACMA has declared three protection zones: Northern Sydney, Southern Sydney, and Perth, each in 2007. The Sydney page describes two zones and named cables. It is not a census of every international cable. NEXTDC says edge sites at Sunshine Coast, Darwin, and Geelong sit where international subsea cables connect Australia.
acma.gov.au acma.gov.au nextdc.com
The short price analog is one month of the wholesale spot path, and it fell. July averaged 77 dollars per megawatthour and August averaged 65 dollars per megawatthour. The calculated one-month decline is 15.6 percent. The quarterly average was 63 dollars per megawatthour. The year-on-year decline is 27 percent. Prices were 15 percent below the June quarter. A full-year computer-import growth rate is not this band.
aemo.com.au
Enterprise exposure is megawatts and sites. Billing utilisation was 175.0 MW across 18 operating facilities, and Macquarie prints 21 MW installed in Sydney and Canberra. The ACSC factsheet's average self-reported large-business cost is 148,100 dollars. That dollar is not the enterprise book. Data centres are not named in the factsheet's top three critical-infrastructure sectors.
nextdc.com cdn-api.markitdigital.com cyber.gov.au

What stops the Australian hall, the feeder, and the imported server

A China trade stop removes a named assembly geography without an Australian customs share. NVIDIA says manufacture of components and final assembly are concentrated in China, Hong Kong, Israel, Korea, and Taiwan, and it names Hon Hai, Wistron, and Fabrinet as contract manufacturers. Customer-headquarters revenue from China including Hong Kong was 19,677 million dollars. The calculated share of total revenue of 215,938 million dollars is 9.1 percent. That figure is sales to China-headquartered customers. It is not the customs value of a server landed in Australia.
sec.gov
A Taiwan export slowdown hits wafers and the supply sentence. NVIDIA's business depends on consistent supply from Taiwan and South Korea. It uses TSMC and Samsung for wafers and CoWoS technology for packaging. The 76 percent footnote is an end-customer attribution inside Data Center revenue from Taiwan-headquartered customers, to end customers based in the United States and Europe. It does not measure a finished server bill of materials, a hall's GPU count, or an Australian import share. DFAT's Taiwan line is 12,619 million Australian dollars and a printed 2.6 percent of all goods imports.
sec.gov dfat.gov.au
The domestic break in the first wave is the hall and the feeder, not a lost Chinese buyer of compute. Operating data-centre demand on the AEMO page is 484 MW in New South Wales and 225 MW in Victoria. The connection list is 22 data centres and 10.1 GW of maximum capacity load. A grid event stops the hall without a compromise of the DCIM server.
aemo.com.au
International sessions are a separate path. The Northern Sydney zone runs about 40 nautical miles, 74 kilometres, from Narrabeen to the 2,000 metre depth and covers northern branches of the Australia Japan Cable and Southern Cross. The Southern Sydney zone runs about 30 nautical miles, 55 kilometres, from Tamarama and Maroubra and covers southern branches of the Australia Japan Cable and the Tabua Cable. A zone incident is not a count of every cable into the country.
acma.gov.au
A cyber wave against the hall does not need to steal tenant data to stop the floor. Successful exploitation of EcoStruxure IT Data Center Expert could disrupt operations and access system data. Liebert RDU101 and IS-UNITY flaws could cause a denial of service or remote code execution. CISA says UPS management interfaces have been reached through unchanged default credentials, and a UPS load can be a data center. ACSC adds that operational technology should have a documented connectivity record and a documented third-party risk.
cisa.gov cisa.gov cisa.gov cyber.gov.au

How hard, how soon

0–3 months

Short-horizon price analog: NEM-wide wholesale spot prices averaged 77 dollars per megawatthour in July and 65 dollars in August. The calculated one-month decline is 15.6 percent. The figure is rounded to one decimal from those two monthly prints. It is not a year-on-year peak, it is not a data-centre contract rate, and the direction in the observed quarter is a decline.
aemo.com.au
No fetched page prints days of a data-centre outage or weeks of a server lead time. The duration that is printed for this horizon is ACSC's 3 month isolate-and-operate preparation. The full-year computer-import growth of 60.7 percent is not the 0-3 month figure.
cyber.gov.au dfat.gov.au

1–6 months

Quarter-on-quarter price analog: the NEM-wide average of 63 dollars per megawatthour was 11 dollars lower than the June quarter. Prices were 15 percent below the June quarter. The 15 percent is the page's own print. September's monthly average of 47 dollars shows the path inside the quarter kept falling.
aemo.com.au

12+ months

Long-horizon price analog: the year-on-year decline is 27 percent, equal to 23 dollars per megawatthour on the page. The import stock that does not clear inside a year is the computers line at 22,007 million Australian dollars, up 60.7 percent, still without a partner split. Heating and cooling equipment, the building commodity, was down 5.3 percent on that same full-year factsheet.
aemo.com.au dfat.gov.au

Wave 1

Wave 1 is the hall itself: DCIM, the cooling and power monitors, the UPS controller, and the network inside the hall. Campus power interconnection is wave 1 indirect because the hall stops when the feeder stops. Submarine cable landings are wave 1 indirect because international traffic for this market crosses the Sydney and Perth zones. This ordering is a planning model.

cisa.gov cisa.gov cisa.gov cyber.gov.au acma.gov.au

Wave 2

Wave 2 is the imported server fleet as a direct target once the hall network is the path, and colocation tenants as an indirect outage when cooling, UPS, or that network fails. Tenant demand quoted by NEXTDC includes a 25 billion Australian dollar Microsoft infrastructure announcement. It is not a cloud-revenue figure. This ordering is a planning model.

sec.gov nextdc.com dfat.gov.au

Wave 3

Wave 3 is the distributed set: the 6 MW first phase as a direct controller risk, and fit-out counterparties as an indirect stop when equipment origins or connection dates slip. The megawatt tranche is the scale. The 148,100 dollar average is not used as the enterprise or the small book. This ordering is a planning model.

cdn-api.markitdigital.com cyber.gov.au

Country exposure

origin sharepercent

56levelNSW transmission-connection capacity

The report states that 56 percent of that transmission-connection capacity is in New South Wales.

AEMO QED

4.5levelcomputers share of goods imports

Computers were 4.5 percent of goods imports.

DFAT goods factsheet

Cost and price shock by time bucket

price changepercent

15.6decline0-3 monthsone-month NEM wholesale

The calculated one-month decline is 15.6 percent.

AEMO QED

15decline1-6 monthsNEM wholesale versus June quarter

Prices were 15 percent below the June quarter.

AEMO QED

27decline12+ monthsNEM wholesale, year on year

The year-on-year decline is 27 percent.

AEMO QED

Downstream scale

countscount

18levelNEXTDC operating facilities

NEXTDC reported 18 operating facilities.

NEXTDC FY26

22leveltransmission-connection data centres

AEMO counted 22 data centres in the transmission connection process.

AEMO QED

load gwgigawatts

10.1leveltransmission applications, not billing

The transmission queue totals 10.1 GW.

AEMO QED

load mwmegawatts

484levelNSW data centre demand

New South Wales data centre demand averaged 484 MW.

AEMO QED

225levelVictoria data centre demand

Victoria data centre demand averaged 225 MW.

AEMO QED

175.0levelNEXTDC billing utilisation

Billing utilisation was 175.0 MW.

NEXTDC FY26

Operating prints

ratespercent

61levelNEXTDC billing over built

Billing utilisation was 61 percent of built capacity.

NEXTDC FY26

What to do

Day 7

Take UPS management interfaces off the internet and confirm they are not on factory default credentials. Enumerate EcoStruxure IT Data Center Expert versions at or before 8.3 and Liebert RDU101 and IS-UNITY versions at or before the advisory cutoffs. Start the ACSC operational-technology record: assets, connectivity, and third parties, which is the building-management and DCIM map.
cisa.gov cisa.gov cisa.gov cyber.gov.au

Day 30

Split the power book into megawatts already billing, megawatts sold but not commenced, and megawatts only in a connection application. Billing utilisation was 175.0 MW. Contracted utilisation is 740.1 MW. The transmission queue totals 10.1 GW and is not the billing book.
nextdc.com aemo.com.au

Day 90

Prove the ACSC isolate-and-operate window of 3 months on the hall's own UPS, cooling, and DCIM, and list which international routes depend on the Northern Sydney, Southern Sydney, or Perth protection zones. Ask the server vendor which wafers are TSMC and which are Samsung. The filing names both and prints no split.
cyber.gov.au acma.gov.au sec.gov

What to watch

One-month change in the NEM-wide wholesale spot average. Act when the monthly average moves by more than 15.6 percent in one month, in either direction. The 15.6 percent line is the calculated July-to-August move from 77 dollars to 65 dollars per megawatthour, rounded to one decimal. It is a planning line. AEMO does not publish this tripwire, and the series is not a data-centre tariff.
aemo.com.au
NEXTDC billing utilisation. Act when billing utilisation prints below 175.0 MW. That is the 30 June 2026 level on the operating table. The 175.0 MW line is a planning line. NEXTDC did not publish it as a covenant.
nextdc.com
Data centres working through transmission connection. Act when the transmission-connection count prints above 22. That is the September-quarter count of data centres, totalling 10.1 GW of maximum capacity load. The 22 line is a planning line. AEMO did not publish it as a covenant, and the count is not energized halls.
aemo.com.au

By role

Colocation operators

Separate 175.0 MW of billing from 740.1 MW contracted and from the 10.1 GW connection list.
Remove UPS and DCIM management interfaces from the internet and patch EcoStruxure through version 8.3 and the listed Liebert versions.
Write the operational-technology connectivity record ACSC describes, and test a 3 month isolation on UPS and cooling.

nextdc.com cisa.gov cyber.gov.au

Server buyers

Ask which wafers are TSMC and which are Samsung. The filing names both and prints no split.
Do not book the 76 percent footnote, or Taiwan's 2.6 percent all-goods share, as the Taiwan content of a server landed in Australia.
Treat the computers line of 22,007 million Australian dollars as origin-unknown until a partner table is opened.

sec.gov dfat.gov.au

Power and fit-out counterparties

Date only load that is in implementation, 10 projects and 3.4 GW, separately from 12 projects and 6.7 GW still in application.
Do not treat heating and cooling imports of 5,639 million Australian dollars as a secured origin. The factsheet has no country column.
Hold Macquarie's 6 MW September tranche as the near commissioning, and the 268 MW estimate as unbuilt.

aemo.com.au dfat.gov.au cdn-api.markitdigital.com

Uptime and property insurers

Schedule the enterprise book as 18 operating facilities and 175.0 MW billing, and the mid book as 21 MW installed.
Do not price a national outage day count. None was published. Use the 3 month isolation standard as a preparation clause, not as a loss history.
Do not use the 148,100 dollar large-business average as the hall loss.

nextdc.com cdn-api.markitdigital.com cyber.gov.au

Weekly checks

NEXTDC billing utilisation, MW It is the energized sold book at the named landlord. A print under 175.0 MW is the planning line. Billing utilisation was 175.0 MW.
nextdc.com
NEM-wide monthly wholesale spot average, dollars per megawatthour The one-month analog is the move from 77 dollars to 65 dollars. The calculated one-month decline is 15.6 percent. It is not a data-centre tariff.
aemo.com.au
Data centres in the transmission connection process, count AEMO counted 22 data centres in the transmission connection process. A print above 22 is the planning line for the application list, not for energized load.
aemo.com.au
New South Wales and Victoria data centre demand, MW New South Wales data centre demand averaged 484 MW. Victoria data centre demand averaged 225 MW. They are not a national total and they are not the operator's billing megawatts.
aemo.com.au
Internet-exposed UPS and DCIM management interfaces CISA's UPS action is to remove management interfaces from the internet. EcoStruxure and Liebert flaws are remotely exploitable at low complexity. ACSC wants the connectivity of that operational technology written down.
cisa.gov cisa.gov cyber.gov.au

What is not known

Observed baselines are the NEXTDC FY26 report, the Macquarie presentation, the DFAT goods factsheet, the two ACMA documents, the AEMO quarterly PDF, the ACSC factsheet and operational-technology note, the NVIDIA 10-K, and the three CISA documents. Inferences are wave order, any claim that a 2027 price path matches the September quarter, and the ability of Samsung or Micron to replace a Taiwan shortfall.
nextdc.com aemo.com.au sec.gov
Decision-changing limit. The unpublished Australian primary is the partner split inside the computers import of 22,007 million Australian dollars. China at 27.0 percent and Taiwan at 2.6 percent are all-goods shares on the same factsheet and are not applied to computers. The paired United States limit, recorded from the search and not used as a figure, is a Census country-dollar split of automatic data processing machines: the trade API returned a missing-key page and the current FT-900 exhibit 7 address returned HTTP 404. The AEMO media-release page for this quarter returned HTTP 403, so every AEMO figure is from the quarterly PDF. An ABS establishment-size cube was not opened. The Mandala paper was not opened.
dfat.gov.au aemo.com.au
Calculated figures use two printed inputs and are labeled. The 15.6 percent decline uses 65 and 77. The 65.4 percent Victoria rise uses 225 and 136. The 89.7 percent uses 193,737 and 215,938. The 19.6 percent uses 42,345 and 215,938. The 9.1 percent uses 19,677 and 215,938. Each is rounded to one decimal. The 4.5 percent computers share, the 56 percent New South Wales connection share, the 27 percent price decline, the 15 percent quarter decline, the 40 percent New South Wales demand rise, and the 68 percent Data Center revenue rise are the pages' own prints and are not recalculated.
aemo.com.au sec.gov dfat.gov.au
State demand, operator billing, and connection applications are different megawatts. This report does not add 484 MW to 225 MW, does not divide 175.0 MW by either state print, and does not treat 10.1 GW as energized. KL1 at 10 MW and 65 MW full scale is in Malaysia. The three Australian regional built figures are not summed with the group total of 287.9 MW. No headcount for NEXTDC was printed. No days-of-outage figure and no weeks-of-server-lead-time figure were published on the pages opened. The 148,100 dollar figure is an average self-reported large-business cost and is not the enterprise exposure.
aemo.com.au nextdc.com cyber.gov.au

Working papers: node summary

Node	Primary impact	Time horizon	Cyber wave	Evidence
Data halls	A DCIM compromise can disrupt monitoring across NEXTDC's operating halls even while the grid feed is still up.	0-3 months	Wave 1 (direct)	CISA EcoStruxure advisory; NEXTDC FY26 report
Campus power interconnection	New halls wait on a transmission-connection list whose gigawatts are applications, while operating data-centre demand is a few hundred megawatts in New South Wales and Victoria.	0-3 months	Wave 1 (indirect)	AEMO Quarterly Energy Dynamics September quarter
UPS and backup generation	An internet-exposed UPS management interface can drop the backup path inside an Australian hall when the feeder fails.	0-3 months	Wave 1 (direct)	CISA UPS insight; NEXTDC FY26 report
Cooling plant	A remote flaw in cooling and power monitors can force a thermal shutdown, and the imported cooling equipment has no published country split.	0-3 months	Wave 1 (direct)	CISA Liebert advisory; DFAT goods factsheet; Macquarie presentation
Server and accelerator fleet	Replacement servers are an imported computers line with no partner split, and the accelerator inside a certified AI factory still depends on Taiwan wafers and a named assembly list that includes China.	1-6 months	Wave 2 (direct)	DFAT goods factsheet; NVIDIA fiscal 2026 10-K; NEXTDC FY26 report
Hall network	The network inside the hall is the path a remote DCIM or UPS flaw uses, and it is the connectivity an operator is told to document before an isolation.	0-3 months	Wave 1 (direct)	ACSC operational-technology note; CISA UPS insight
Submarine cable landings	International traffic for Sydney and Melbourne halls depends on submarine cables, and only three protection zones are declared around two Sydney approaches and Perth.	0-6 months	Wave 1 (indirect)	ACMA Sydney zones page; ACMA protection-zone guide; NEXTDC FY26 report
Colocation tenants	Tenant workloads already billing stop when the hall loses cooling, UPS, or the in-hall network, separate from any cloud subscription.	0-6 months	Wave 2 (indirect)	NEXTDC FY26 report; CISA EcoStruxure advisory
Fit-out counterparties	Electrical and mechanical contractors carry a multi-year build against imported heating, cooling, and circuit equipment whose origins are unpublished.	1-12 months	Wave 3 (indirect)	NEXTDC FY26 report; DFAT goods factsheet
Small hosting establishments	The small operating tranche on the pages opened is a 6 MW first phase, and an establishment census was not published, so a direct controller hit is sized in megawatts.	1-12 months	Wave 3 (direct)	Macquarie presentation; CISA UPS insight

Data Centers & Digital Infrastructure — Australia (Investor-Grade, Downstream Focus)

What happens

What stops the Australian hall, the feeder, and the imported server

How hard, how soon

0–3 months

1–6 months

12+ months

Wave 1

Wave 2

Wave 3

Country exposure

Cost and price shock by time bucket

Downstream scale

Operating prints

What to do

Day 7

Day 30

Day 90

What to watch

By role

Colocation operators

Server buyers

Power and fit-out counterparties

Uptime and property insurers

Weekly checks

What is not known

Sources