| Centrelink benefits | Social security payments are the core book, and a payments-platform outage hits the daily myGov queue. | 0-3 months | Wave 1 (direct) | Services Australia annual report 2025-26 |
| myGov payments channel | The digital channel is the daily front door, and availability is the uptime print a wave would break. | 0-3 months | Wave 1 (direct) | Services Australia annual report 2025-26 |
| Service centres | Service centres are the in-person fallback when myGov or the call queue fails. | 0-3 months | Wave 1 (indirect) | Services Australia annual report 2025-26 |
| Commonwealth procurement | China is still acceding to the GPA, so a China stop does not remove an existing GPA membership that was never in force. | 0-3 months | Wave 1 (indirect) | DFAT GPA page |
| State agencies | State and territory governments are the large employer because they fund and staff health and education, which this report treats as buyers. | 1-6 months | Wave 2 (direct) | ABS public sector employment 2025-26 |
| Payment contractors | Consultants and contractors are a thin slice of agency expenditure and lose work if the payments platform or the vendor laptop stops. | 1-6 months | Wave 2 (indirect) | Services Australia expenditure shares; ACSC cybercrime costs |
| Tax administration records | An ATO collection total was not on a page that returned, so the sourced administration ratio is the payments cost per dollar. | 1-6 months | Wave 2 (indirect) | ATO URL HTTP 403; Services Australia cost ratio |
| Council permits | Council permit counters are the local distributed target, not a state health service. | 1-6 months | Wave 3 (direct) | ALGA council count; ABS local jobs |
| Local councils | Councils are a small employment tier next to state government, and a council ransomware event is the later direct hit. | 1-6 months | Wave 3 (direct) | ABS local jobs; ACSC state and local share; ALGA |