Singtel’s Optus says customer information potentially compromised in cyberattack

Michelle Zhu

Michelle Zhu

Published Thu, Sep 22, 2022 · 12:48 PM
    • Optus, the Australian subsidiary of Singtel, says it is working with the Australian Cyber Security Centre to mitigate any risks to customers.
    • Optus, the Australian subsidiary of Singtel, says it is working with the Australian Cyber Security Centre to mitigate any risks to customers. PHOTO: OPTUS

    OPTUS is investigating the possible unauthorised access of both current and former customers’ information following a cyberattack which was shut down “immediately” upon its discovery.

    In a press statement on Thursday (Sep 22), the Australian subsidiary of Singtel said it is working with the Australian Cyber Security Centre to mitigate any risks to customers.

    It has also notified the Australian Federal Police, the Office of the Australian Information Commissioner, as well as key regulators.

    Information which may have been exposed during the cyberattack include customers’ names, dates of birth, phone numbers and email addresses. For a subset of customers, addresses and ID document numbers such as driver’s licences or passport numbers may have also been compromised.

    Optus, however, said payment details and account passwords have not been compromised.

    The company added that its services, including mobile and home Internet, are not affected – nor were messages and voice calls compromised. It maintains that Optus services remain “safe to use and operate as per normal”.

    BT in your inbox

    Start and end each day with the latest news stories and analyses delivered straight to your inbox.

    “While we are not aware of customers having suffered any harm, we encourage customers to have heightened awareness across their accounts, including looking out for unusual or fraudulent activity and any notifications which seem odd or suspicious,” stated the company.

    Optus intends to undertake personal notifications and offer expert third-party monitoring services to customers believed to have heightened risk.

    Chief executive Kelly Bayer Rosmarin said the company is “devastated” to discover it had been subject to “a cyberattack that has resulted in the disclosure of (its) customers’ personal information to someone who shouldn’t see it”.

    “As soon as we knew, we took action to block the attack and began an immediate investigation. While not everyone may be affected and our investigation is not yet complete, we want all of our customers to be aware of what has happened as soon as possible so that they can increase their vigilance,” said Rosmarin.

    “We are very sorry and understand customers will be concerned. Please be assured that we are working hard, and engaging with all the relevant authorities and organisations, to help safeguard our customers as much as possible.”

    Shares of Singtel were down by S$0.01 or 0.4 per cent at S$2.66 as at the midday trading break on Thursday, before the news. 

    Copyright SPH Media. All rights reserved.