Former and current Optus customers whose personal identification details were exposed in last week's cyber attack are being told to replace those documents to prevent identity theft and fraud.
Here's what you need to know about changing your drivers licence number, passport or Medicare details.
Tap the links below to jump straight to that section.
TIP: If you're expecting new documents to be sent to you via the post, it might be worth locking your mailbox, just to be safe.
How do I change my drivers licence number?
Licence numbers are issued by the states and territories, so the process changes, depending where you live. Tap the links below to jump straight to your state or territory:
ACT
Those deemed most at risk of identity theft or fraud due to the Optus data breach will be able to get a new drivers licence card, the ACT government says.
However, they will be contacted if they need to replace their licence.
The ACT government said that, if people aren't contacted by Optus by the end of the week, they don't need to replace their licence.
While the fee to replace a card is $42.60, Optus will return that amount into affected customers' accounts.
ACT licences have two identification numbers — a licence number and a card number — with both needed to verify identity.
"This means that, only if both the drivers licence number and the card number have been compromised, a replacement card is necessary," the ACT government says.
"Only a small number of people are affected and Optus will be writing to these people by the end of this week."
Here's how people can replace their licences:
- Apply online via the access Canberra website
- Contact the Resolution and Support Team at Access Canberra on 13 22 81 — they'll need need to make a payment via the phone
- Attend any Access Canberra Service Centre.
Canberrans most at risk of identity theft or fraud due to the Optus data breach are those who signed up for an Optus account this month.
From September 1, Canberrans who signed up for an Optus account needed to provide both their driver licence number and card number, to verify their identity.
NSW
Minister for Digital Government Victor Dominello said Optus would contact customers in the coming days to advise whether or not they needed to apply for a replacement drivers licence.
He said people with a digital NSW drivers licence would have an interim card number issued instantaneously via the Service NSW app while a new plastic licence card would be issued within 10 business days.
People can apply for a new licence by:
- Going through Service NSW's online portal
- Visiting a Service Centre
- Calling 13 77 88.
"The cost to replace your drivers licence is $29 and will be charged by Service NSW at the time of application — reimbursement advice will be issued by Optus to customers in the coming days," he wrote.
Mr Dominello said Optus would "absolutely" foot the bill for customers to replace their NSW drivers licences if they have been affected by the cyber attack.
Northern Territory
People in the Northern Territory who need to replace their licence will have fees waived, the Northern Territory government confirmed on Wednesday.
Affected customers will have to attend an Motor Vehicle Registry (MVR) and show their notice from Optus.
People in regional and remote parts of the territory should contact the MVR by calling 1300 654 628.
Northern Territory drivers licences include two key unique identifiers — a licence number and a card number — and the territory government said both were required for licence data to be used for identity fraud.
It's estimated that only about 1 per cent of Northern Territory Optus customers had both numbers compromised, but people who had only their licence number stolen can have their licence cancelled and re-issued.
Queensland
Queensland Transport Minister Mark Bailey said that, if people wanted to change their licence numbers, they would need to attend a Transport and Main Roads customer service centre.
They'll need a breach notice from Optus or an enforcement authority, as well as evidence of identity — a current driver's licence will do.
He posted to Twitter that new licences with new numbers would be provided free of charge to Queenslanders impacted by the breach.
A Department of Transport and Main Roads spokesperson said the department had been assisting customers affected by the Optus breach.
South Australia
A spokesperson for the South Australian Department for Infrastructure and Transport said those affected by the Optus breach could get a new drivers licence number at a Service SA Centre.
People will need to show documentation they've received from Optus, confirming they've been affected by the breach.
South Australian Premier Peter Malinauskas said the state would also be waiving the fee for those who needed to replace their licence.
Tasmania
Affected Tasmanians will be able to get a new licence number issued free of charge.
They must attend a Services Tasmania centre with proof of identity documents and show their Optus data breach communication or provide a Statutory Declaration.
Western Australia
New drivers licence cards with new licence numbers will be issued to people who have been informed by Optus that their West Australian drivers licence information has been compromised.
They'll need to attend a Department of Transport service centre or regional agent and bring the following things with them:
- Primary and secondary proof of identity
- Optus-issued document verifying a proof of breach
- Current WA driver's licence — this will need to be surrendered.
They won't be charged for this, with the West Australian government saying they will be given priority.
They'll be issued with a letter acknowledging their application for a new licence while the new cards are printed.
Victoria
Victorians will get free licence number replacements if they are impacted by the breach.
However, for now, VicRoads is asking people to not use usual replacement licence services and is instead directing them to www.vicroads.vic.gov.au/optusbreach.
There, they'll be able to fill out a dedicated form to request to have their Victorian drivers licence record flagged and protected.
"Once you submit the form you'll be sent a confirmation email and follow-up communications, including information on how to change your licence should you wish," the website says.
"The Department of Transport and VicRoads are also committed to supporting impacted individuals who wish to have their licence replaced.
"This request will be validated against the Optus information once available."
A Department of Transport spokesperson said the government would request Optus repays the cost of the new licences.
How do I replace my passport?
Optus will pay for the fees replacing passports for those caught up in the breach, Prime Minister Anthony Albanese announced on Friday.
"Optus have responded to my request that I made both in the parliament and that Senator Wong made in writing to Optus, they will cover the costs of replacing affected customers passports," he said.
While no-one will be able to travel in your name using leaked passport details, your passport number may still be used for identity theft.
The Department of Foreign Affairs and Trade said it was up to individuals if they wanted to cancel their passport or apply for a new one.
You can replace your passport by:
- going through Passport replacement portal
- picking up a form at a participating Australia Post outlet
- contacting an Australian diplomatic or consular mission.
A passport ordinarily costs $193 to replace, while a new passport costs up to $308.
How do you replace your Medicare card?
If you used your Medicare card to prove your identity with Optus, be assured that people can't access your Medicare details with just your Medicare card number.
However, if you're concerned or you've been affected, you can replace your Medicare card.
You'll have the same Medicare number that you did before, only the last digit will change.
There's three ways to replace you Medicare card:
- using your Medicare online account through myGov
- the Express Plus Medicare mobile app
- calling the Medicare program on 132 011.
On Wednesday, Optus said it had identified 14,900 valid Medicare ID numbers that had not expired that had been affected.
"All of the customers who have a Medicare card that is not expired will be contacted within 24 hours," Optus said in a statement.
"There are a further 22,000 expired Medicare card numbers [that have been] exposed … [those cardholders] will also be contacted directly over the next couple of days."
If your Medicare or Centrelink account has been compromised, you can call Services Australia's scams and identity theft help desk. They can help secure accounts if they've been compromised.
