Victorian informational on Optus breach

The Victorian Government is helping Victorians exposed in the recent Optus security breach.

You’ll get an email from Optus if you need to act.

On this page:

What should I do now?

1. Wait for Optus to contact you before flagging documents

Optus will contact all affected customers. When they contact you, they’ll tell you the affected details.

If you block or cancel ID documents before Optus say you need to, you might not be able to use those documents. For example, to apply for something online that needs ID verification, like getting a passport, a Working with Children check, or a new mobile phone contract.

2. Block new credit applications in your name

Criminals use stolen identity details for things like getting credits cards or taking out loans in your name.

Don’t worry. If someone uses your stolen document info, you won’t have to pay. But it could be a pain clearing things up with banks and credit agencies.

To avoid hassles, you should temporarily block credit applications in your name.

Credit rating agency Equifax has a simple online form to set up a credit block.

Tick the box at the bottom and they’ll block other Australian credit agencies for you, too.

3. Flag your documents after Optus contacts you

You can flag your documents through Service Victoria.

It takes about 3 minutes to let us know if we need to keep an eye on your stolen document info. We’ll then tell other government agencies.

For now, you can register to get VicRoads to issue you a new driver licence.

Check back here often for updates on other documents.

4. Keep alert

Watch for suspicious activity in all your online accounts, especially bank accounts.

Report any strange or fraudulent activity to your bank or provider right away.

Look out for contact from scammers who may have your personal details. This may include suspicious emails, texts, phone calls or social media messages.

Never click suspicious links and never give out your passwords or any personal or financial information.

Set up 2-factor authentication on your bank, email, social media and other online accounts. This is an extra layer of security. Even if someone else steals your password, they won’t be able to access your accounts.

Setting up 2-factor authentication might seem tricky. But it takes just minutes and is a lot less hassle than undoing any damage criminals might do to your accounts.

FAQ

Victorian Optus customers mostly had their driver licence numbers exposed. Many ID-proofing processes ask for your driver licence number.

A national Document Verification Service (DVS) check is what institutions like banks use to verify identity.

While it was mostly driver licence numbers exposed, other data included Victorian Optus customer:

  • current and expired Australian passport details
  • Medicare card details
  • Birth Certificate details
  • Working with Children Check details
  • Firearm Licence details

If you’re worried about what you need to do for each of these documents, contact the issuer for advice.

Optus is reaching out to people who have been affected.

Optus advise they won’t send any links in any emails or SMS messages, so if you receive one, do not open it.

Optus is asking their customers to contact them using their My Optus App as this is the easiest way to reach out. You can also call them, Monday to Friday from 9am to 6pm and Saturdays from 9am to 5pm by calling:

Optus will notify you about what to do about your driver licence.

If Optus recommends you replace your licence, you can register your details through Service Victoria. We’ll work with VicRoads to process this for you.

VicRoads will issue you a new licence with a new number. This may take up to several weeks due to the number of Victorians affected.

If Optus hasn’t contacted you yet, stay vigilant until they do and be alert to suspicious messages or activities.

Only customers who believe they’ve been the victim of genuine identity theft or fraud should request a new driver licence number.

You should only do this if criminals have already used your stolen ID.

Otherwise, keep your driver licence for now. Only change it if you need to or have been told to.

VicRoads will issue new licences to eligible affected Optus customers free of charge.

If you feel you’re in immediate danger call Victoria Police on 000. Otherwise, reach out to VicRoads and ask for a new driver licence.

Look out for suspicious or unexpected activity in all your online accounts, especially bank accounts.

Report any fraudulent activity immediately.

Look out for contact from scammers who may have your personal details. This may include suspicious emails, texts, phone calls or social media messages.

Never click suspicious links and never give out your passwords or any personal or financial information.

Compromised data may include:

  • customer name
  • date of birth
  • phone number
  • email address
  • home address
  • ID document details, like driver licence or passport numbers

Optus is notifying all affected customers directly, with specific details.

This is happening now but may take some time due to the number of customers who have been impacted.

It’s always good to protect yourself against fraud and scams. IDCARE has some great information on how to protect yourself.

You can find out more about the breach on the Optus website.