9.8 million customers are at risk of data theft because cybercriminals breached Optus website and systems. The attacks came to light on September 22, with Optus not confirming any specific type of attack as of yet. The attack caused intermittent problems for some customers trying to access the Optus website and services.
But, according to the Optus team, the actual number of compromised accounts is much smaller, which includes the customer’s names, driver’s licenses, home addresses, phone numbers, passport information.
A Twitter user isn’t happy about Optus cyber attack compensation after the website announced the attack.
After Optus cyber attack today, the team immediately shut down the services after discovery. Optus is also collaborating with the Australian Cyber Security Center to reduce customer risks. The team has also informed the Australian Federal Police, the Australian Information Commissioner, and other key regulators.
The intrusion is thought to have occurred through the exploitation of a vulnerability in an application programming interface (API), but Bayer Rosmarin, Optus CEO, refused to confirm any exploitation or human error, stating that it was “the subject of criminal proceedings” and under investigation by the Australian federal police and the Australian Cyber Security Center.
Optus CEO insists on having an immediate response team, supported by the government, to mitigate the damage after such cyber attacks. Kelly Bayer Rosmarin said:
“We don’t yet know who these attackers are and what they want to do with this information, which is why we really need a team Australia response. I’m angry that there are people out there that want to do this to our customers. I’m disappointed that we couldn’t have prevented it, and disappointed it undermines all the great work we’ve been doing to be a pioneer in this industry. And I’m very sorry and apologetic.”
Rosmarin’s response got backlash from countless users on Twitter:
What Should Optus Customers Do Next?
Millions are concerned about their data after the news of Optus under attack. What should I do? … is the only question roaming in customer’s minds after such a big Australian company became victim of a cyber attack.
Some customers are thinking about changing internet service providers, while others are bashing Optus for not having a robust security system for payment integrations.
But this Optus cyber attack is not new.
Optus and Telstra, Australia’s two largest telecommunications providers, have both been hit by cyber attacks recently.
A Similar Incident Happened in 2021 During Telstra Cyber Attack
Hackers claimed to have stolen SIM Card information of Telstra users after the company’s website was offline for many days.
Telstra also confirmed that it had been hit by a cyber attack, although the company said that its systems had not been affected.
Both companies are working with authorities to investigate the attacks. It is not yet known who is responsible for the attacks.
Telecommunications Interception and Surveillance laws in Australia
Under the surveillance bill, telecommunications service providers can’t access user data and content on devices and systems. Every service provider needs a legal warrant to:
- Access customer communications
- Use stored information
- Authorize data closure of customers
Wrapping Up
Cyber attacks are becoming increasingly common, and both Optus and Telstra have been working to improve their defenses against such attacks.
This latest incident highlights the importance of organizations taking steps to protect themselves against cyber attacks. Organizations should have robust security systems and policies in place, and employees should be trained in how to recognise and report suspicious activity.
Sameed Ajax
January 2, 2023
1 year ago
