Both current and former Optus customers may have potentially been involved in a data breach as a result of a cyber attack on the telecommunications company.
Optus says it noticed "unusual activity" yesterday afternoon and is now working with the Australian Cyber Security Centre and the Australian Federal Police.
Here's what we know about the attack, and how you can boost your online security.
Which type of data may have been exposed?
Optus says the type of information which may have been exposed includes:
- Customers' names
- Dates of birth
- Phone numbers
- Email addresses
For a subset of customers:
- Addresses
- ID document numbers such as driver's licence or passport numbers
Optus says payment details and account passwords have not been compromised.
Additionally, Optus services, including mobile and home internet, are not affected, and messages and voice calls have not been compromised.
The company says Optus services remain safe to use and operate as per normal.
Who has been impacted by the cyber attack?
Optus CEO Kelly Bayer Rosmarin says both current and former customers may have potentially been affected by the cyber attack.
Ms Rosmarin says the amount of people affected is "significant" but stopped short of revealing a specific number, saying it's still too early.
"We want to be absolutely sure when we come out and say how many," she told ABC's Afternoon Briefing.
"We're so deeply disappointed because we spend so much time and we invest so much in preventing this from occurring.
"Our teams have thwarted a lot of attacks in the past and we're very sorry that this one was successful."
How can I strengthen my cyber security?
While Optus says they're "not aware of customers having suffered any harm," the company is encouraging people to have "heightened awareness across their accounts, including looking out for unusual or fraudulent activity and any notifications which seem odd or suspicious."
Optus have recommended looking to reputable sources, such as the government's Money Smart platform and the Identity Fraud page on the Office of Australian Information Commissioner website.
For customers believed to have heightened risk, Optus says it will undertake "proactive personal notifications" and offer "expert third-party monitoring services."
Cyber Security Minister Clare O'Neil says all Australians need to strengthen their cyber defences to help protect themselves.
The Australian Cyber Security Centre (ACSC) recommends:
- Updating your devices to protect important information
- Protecting your accounts with multi-factor authentication
- Backing up data regularly to the cloud or an external hard drive
The ACSC website has step-by-step guides on how to apply these tips on Apple, Android and Windows devices.
