on 27-09-2022 12:44 PM
Is anyone here affected by the Optus hack?
We are not, but my daughter received a communication from them to say her bank details & passport details & also licence details I think, had been stolen.
The annoying thing is she is not with Optus. She has not been with Optus for almost 6 years. Why, then, do they still have all her records on file? Very annoying.
on 30-09-2022 09:04 AM
@dontmissthese wrote:Why these sensitive details ( passport, drivers license & Medicare numbers ) were not at least encrypted is beyond me.
There is no excuse and Optus should be sued over this alone.Once they have been used to ID an applicant they should have been deleted anyway.
I have NEVER been asked for DL, Passport or Medicare numbers when going through a phone ID process.
Let's hope that, ongoing, all sensitive data will either be encrypted or deleted once an application is approved.
I think it is absolutely criminal that Optus was not only keeping this sort of data on file, but keeping it on file for someone who was no longer a customer and who should have been deleted from their system 6 years ago. Why would Optus need to know medicare, passport, licence details of a non customer? Those should have been deleted and if she ever wanted to join them again, they could have taken her through a new verification process.
on 30-09-2022 10:01 AM
Interesting thread.
I took all on board - JB HiFi made a killing yesterday.lol
IT bloke coming to install all tomorrow morning.
on 30-09-2022 01:19 PM
You are completely right, Springy, but apparently they have to.
Optus began contacting customers whose personal information was compromised in the breach via email and SMS on Friday. It said customers as far back as 2017 may be affected because it is required to keep identity verification records for six years.
(from https://www.theguardian.com/australia-news/2022/sep/24/optus-cyber-attack-company-opposed-changes-to... but I have seen the same statement elsewhere too).
Hopefully the government will now change this requirement.
on 30-09-2022 05:28 PM
My daughter must be unlucky as she changed providers in about Jan 2017, when they moved house.
on 30-09-2022 06:09 PM
I am going to throw some obvious advice into the ring.
In a public forum, try not to reveal with which provider you are.
In a public forum, try to reveal as little as possible about which devices you have.
In a public forum, reveal no more than month (not exact day if you can avoid it, and definitely not year) of DOB. Don’t state your age.
In a public forum, don’t discuss any detail that relates to any password you use or have used, or to any secret answer/hint to any account you use or have used.
If you use online banking, don’t say so.
Be aware of what porting is. If your phone suddenly stops receiving/making calls, contact your provider urgently. It’s better to be paranoid than ported.
Any data we post on apps/social media - ANY data - passes out of our control and can be hacked.
Little clues can be put together by “malicious actors”, and ordinary Australians are being targeted.
Those are some of my thoughts, and I hope these points might prevent someone from being scammed and/or having their identity stolen.
on 01-10-2022 03:28 AM
I hope she can sort it out, Springy. It must be very annoying even for current customers, let alone past customers. Luckily I am not affected. I would be quite upset by the recent events if I were an Optus customer or had been one in the past 6 years.
Now it looks that when you ask a question to companies from the email address you signed up with, they ask you to confirm your identity in an email to pull up your account and check your problem. Apparently a new requirement by the Government. I don't feel emails are safe to share sensitive details. I am now looking at more secure email providers with an end-to-end encryption.
I think this whole identification process and leaving all details online is still quite lacking. They force you to share (sometimes also bank accounts details when they only accept direct debit), but if something happens it is basically our problem.
on 01-10-2022 05:00 AM
@domino-710 wrote:Interesting thread.
I took all on board - JB HiFi made a killing yesterday.lol
IT bloke coming to install all tomorrow morning.
How amusing 😂😂😂
on 01-10-2022 05:06 AM
on 01-10-2022 10:28 AM
@janeababe wrote:
@domino-710 wrote:Interesting thread.
I took all on board - JB HiFi made a killing yesterday.lol
IT bloke coming to install all tomorrow morning.
How amusing 😂😂😂
No doubt Norton will be installed on all this new equipment, so she'll be back to square one. That would have to be one of THE worst virus scanners out, not to mention frightfully expensive. In the early days, it was OK, but given how popular it was amongst users, the creators of viruses and whatnot created said viruses not to be detected by Norton. It still happens today, because people are still unloading insane amounts of money to have it installed. McAfee is another that shouldn't be trusted for the exact same reasons.
on 01-10-2022 11:31 AM
LOL