Optus data breach
Optus customers should take steps to protect their accounts and watch out for scams
Updated 28 September 2022
Optus was the target of a cyber-attack that resulted in the release of former and current Optus customers’ personal information.
Optus have stated that payment and password information have not been breached. However cybercriminals may have accessed Optus customers’ names, phone numbers and email addresses, and potentially some identity documents such as driver’s licence or passport numbers which may put them at risk of identity theft.
Optus customers should exercise heightened awareness across their accounts and be vigilant about scams. Any unusual or suspicious activity should be reported immediately to our 24/7 Contact Centre on 13 14 22.
This incident is not related to any Heritage systems, however we encourage our members to contact us if they have any concerns.
Tips to protect your personal information, your accounts and avoid scams:
- Check your accounts, credit report and monitor for any unauthorised transactions or unusual activity. Report any concerns immediately to your Financial Institution.
- While passwords were not exposed in the Optus breach, consider changing passwords on any sites that may be the same as your Optus password.
- Use a unique password for every service you have an account with.
- Enable multi-factor authentication for all online services, including online banking, where available.
- If you receive an unexpected call, email, or SMS demanding payment from a source you do not recognise, do not provide personal or sensitive information, even if they claim to be someone you know. Do not give them access to your accounts and be careful when clicking on any suspicious links in an email.
- Under NO circumstances withdraw funds from your account based on information from a call, email, or SMS.
- Protect your credit score from being defrauded by considering subscribing to Equifax Credit and Identity Protect. Credit reporting bodies can assist with services such as placing a credit ban on your credit report.
- If you are concerned that your identity has been compromised. call IDCARE, Australia’s national identity and cyber support service, on 1800 595 160.
- If you’ve been a victim of a scam, you can report it to the ACCC via the report a scam page help protect others from similar scams. Visit scamwatch.gov.au/report-a-scam.
- If you are concerned about the security of your account, it’s very important you change ALL your Heritage Online passwords and call us immediately on 13 14 22.
Read more in the Scamwatch alert here.
Additional resources to help you limit the risk of fraud:
• Australian Cyber Security Centre (ACSC)
• Moneysmart
• Office of the Australian Information Commissioner
