Optus attack Chief Executive Kelly Bayer Rosmarin described the “worst case scenario” as 9.8 million customers having their information compromised. However, the company still does not know the exact number of affected customers.

Customers who bought products from Optus before 2017 may face a higher risk from the cyberattack because Optus must preserve identity verification records for six years. In the past, the telco suggested modifying privacy laws so customers could request data deletion.

What details were compromised?

The Optus incident involved major data theft. For some customers, the stolen information included:

• Names

• Dates of birth

• Phone numbers

• Email addresses

• Street addresses

• Driver’s licence details

• Passport numbers

The cyberattack did not affect payment information or account passwords. Optus also alerted key financial institutions. The company urged customers to remain alert for unusual activity, fraudulent transactions, or suspicious notifications.

Optus confirmed the breach exposed thousands of Medicare ID numbers. The company reported 14,900 valid Medicare card numbers stolen. Optus will notify every affected customer within 24 hours.

Victor Dominello, the Minister for Digital Government in New South Wales, confirmed that Optus will cover the cost for consumers who must replace their NSW driver’s licences. He explained that authorities will contact affected customers in the coming days with instructions for submitting applications for new licences.

Dominello added that residents with digital driver’s licences will immediately receive an interim card number via the Service NSW app, followed by a new plastic licence within 10 business days.

How can you check if your data was compromised?

Although Optus has already informed customers about the incident, this does not guarantee that your data was exposed. Optus will directly contact you if you face higher risk.

If you suspect compromised data, contact Optus through their app (following their guidelines) or call 133 937.

Do not click on any links claiming to be from Optus. The company confirmed it will never send links through email or SMS.