Malicious or criminal attacks continue to be the leading source of breaches across Australia, although the number of them dropped almost 10% in the six months to December.