The damage bill is the fast, small number, and it is the only one anyone plans for. The real cost is the slow, multi-week recovery behind it, and almost nobody maps that out until they are living through one.

On a normal working night at a grain storage site in the Darling Downs, Queensland, someone rammed a switchboard and stripped the copper out of it. The whole thing took under an hour, most likely a good deal less. By the next morning the damage bill was already being estimated at around $100,000. That is the number that goes up the chain first, and it is the number almost everyone takes to be the cost of the incident.

It is not close. The site was down for four to eight weeks. This piece is about the distance between those two facts: a theft measured in minutes, a recovery measured in weeks, and the stretch in between that almost nobody maps out until they are already living through it. That gap is where the real money is, and it stays invisible for a reason worth understanding before any of the numbers.

Nobody actually owns the whole timeline

The recovery stays out of view for a reason that has nothing to do with secrecy. It is a problem of ownership. Every stage that follows a theft belongs to a different party. Reporting is the police. The claim is an insurer. Replacement is a supplier. Getting the site running again is the internal operations team. Four different owners, four different clocks, and no single person standing over the whole chain with a stopwatch until they have personally lived through one. The sticker price of what was stolen is the only figure anyone works out in advance, because it is the only part of this that has an owner before the theft even happens. So the one number that gets planned for is the one number that ends up mattering least, and the four to eight weeks that actually decide the cost are the weeks nobody was assigned to watch.

Stay with that incident, because it runs through the rest of this piece. The switchboard raid at GrainCorp’s Kupunn site was quick and crude: ram the switchboard, strip the copper, leave. It was discovered almost at once, for the plain reason that taking out the switchboard cut the site’s power, and a site with no power is hard to miss. So this is the fast part of the story, and by a wide margin it is the cheapest. From the moment the intruders arrived to the moment they left, the incident is measured in minutes. Everything after it is measured in weeks. And whatever came off that switchboard is almost certainly not coming back: under 15% of stolen equipment is ever recovered. Recovery is not a plan, it is a long shot, and once the copper is gone the only road open to the site is the slow one that follows. The timeline below is not the unlucky version of events. It is the normal one.

The clock doesn’t start until you report it, and then it runs to months

The first stage looks like the easy one. You report it. This piece is not going to march through police investigation timeframes, because reliable data on how long that process takes does not exist, and inventing a number would be worse than useless. The bottleneck worth naming sits earlier than the investigation anyway: it is the decision to report at all. Western Australia has reported 73% under-reporting of metal theft, with most victims filing only when an insurance claim forced the paperwork, and nothing downstream starts until the report does. The delay is not only a decision, it is distance: on a large remote site, a stripped switchboard on a far boundary does not get checked every day, and the gap before anyone notices is dead time the whole recovery inherits.

Once a claim is lodged, the timeline finally gets hard edges, because this stage is governed by the General Insurance Code of Practice, and the Code sets real deadlines. The insurer has to acknowledge a claim within one business day. Once it has everything it needs, it has ten business days to decide or to tell you what is still outstanding. A full decision on a standard claim is due within four months. Four months is the optimistic reading. The Code allows up to twelve months where a claim is declared complex, and a theft claim with an open police investigation attached is a strong candidate for exactly that label. The regulated timeline, the thing meant to protect you, is also the thing that can hold a payout to the back half of a year.

There is one more step that is easy to forget. Even after a claim is approved, the insurer has a further ten business days to actually pay it. On a recovery this size, ‘approved’ and ‘resolved’ are two different dates, and the site funds the gap between them out of its own pocket.

The real number is the weeks, and nobody can quote you the lead time

Now the stage where honesty matters most, because it is the most often underestimated and the hardest to pin down. Take generators as a stand-in for heavy plant: new standby units currently run twelve to twenty-six weeks of lead time for standard sizes, and up to thirty-nine weeks for larger or mobile ones, on current major-manufacturer data. That figure is not Australian and not mining-specific, and it is here only to give a real, current sense of scale. For most items there is no reliable published number for how long replacement actually takes on an Australian mine site, and any vendor who hands you a confident, specific figure is very likely guessing. What is well documented is that Australian mining equipment order books are running long across the industry, and that pushes this stage in one direction only, which is later.

While all of that plays out, a cost is running that rarely makes the first estimate. The affected part of the workforce does not stop being paid because there is nothing for them to do. Idle labour and delay costs run an estimated $2,000 to $10,000 per day while equipment is unavailable. That is not a paper figure. It is wages the company pays out, every day of this stage, for zero output.

Back to Kupunn, and the number that should have been in your head since the first paragraph. That single incident cost the site four to eight weeks of lost production, and it was targeted more than once across the same year. Four to eight weeks is the real headline; the $100,000 damage estimate was only ever the cover charge. Do the arithmetic the first estimate leaves out: four to eight weeks is twenty-eight to fifty-six days, and at $2,000 to $10,000 a day in idle wages that is a payroll bill of roughly $56,000 at the floor and north of half a million at the ceiling, paid to a workforce with nothing to build. It sits on top of the damage bill, not inside it, and it is separate again from the production the site is not selling. The $100,000 that went up the chain on the first morning was never the cost. It was the deposit.

And these stages do not run side by side. Reporting has to happen before the claim clock starts, the claim usually has to move before replacement is authorised and funded, and replacement has to land before the restart can begin. A slow stage early in the chain does not just cost its own delay, it pushes everything behind it later as well, and the idle-labour meter keeps running the entire way down.

None of this can be sped up. It can be avoided.

So where does Spectur fit, and, just as important, where does it not. Spectur does not make an insurer move faster. It does not shorten a generator’s factory lead time. Nothing in this article depends on pretending otherwise, and this is an audience that would see through the pretence in a second. What Spectur controls is the fork at the very start of the whole thing. Its AI detects the intrusion in real time, at the point of entry. An on-site audible and visual deterrent triggers straight away. A real-time alert reaches the site manager while the person is still on the ground. That moment, before the theft completes, is the only point in this entire timeline where the chain can be avoided instead of merely endured.

That is the whole of the claim, and it is deliberately narrow. Spectur works at the one point that removes the need for a recovery at all. Every stage in this article, the reporting, the claim, the lead time, the idle wages, the weeks of downtime, exists for a single reason: the theft was allowed to finish. Stop it at the line, and none of the rest ever reaches the table.

Back at the switchboard

Go back to the switchboard, the few minutes, and the roughly $100,000 on the first estimate. Then set beside it the four to eight weeks the site did not run, and the workforce paid across every one of those weeks with nothing to produce. The distance between that first estimate and the real cost is the true shape of what a theft costs: a fast, cheap-looking incident that triggers a slow, expensive recovery no single party fully controls once it starts, and that keeps paying wages for every day it runs. Every stage carries its own weight. Reporting has bottlenecks of its own, the insurance claim runs on a real and binding timeline that often runs long, and replacement lead times are long and, for most equipment, genuinely uncertain. Not one of these stages can be skipped once the theft has happened, and not one of them stops the payroll while it runs.

The only point where this whole timeline can be avoided instead of endured is the one moment before any of it starts, while the intrusion is still on the line and can still be stopped. Everything after that is just the bill arriving in instalments.