Optus breach: New investigations launched, millions in fines on the table

Date:
Tue, 11 Oct 2022 12:40:25 +0000

Description:
Two separate but coordinated investigations launched that could result in millions of dollars in fines for Optus.

FULL STORY ======================================================================

Australian telecoms giant Optus is facing two additional investigations in relation to the major data breach that occurred last month. Depending on the results of the investigation, the company could be forced to pay more than $4 million in damages.

As reported by The Guardian , the Australian Communications and Media Authority (ACMA) and the Office of the Australian Information Commissioner (OAIC) said theyd be launching separate but coordinated investigations.

ACMA will look into whether or not Optus complied with the rules and regulations of sensitive data management , while OAIC wants to investigate
the steps Optus took to protect customer data. Each investigation, the publication added, could result in a fine of up to $2.2 million, but it could take some time before any conclusion is reached. Cooperating with the regulators

Optus said it is committed to working with the regulators on this issue,
while ACMA chair Nerida OLoughlin stressed the importance of trust: When customers entrust their personal information to their telecommunications provider, they rightly expect that information will be properly safeguarded. Failure to do this has significant consequences for all involved, she said.

Besides the two new investigations, Deloitte is also running an external review, while the Australian federal police is looking into who stole, and is trying to sell, the sensitive data. Read more

Optus confirms customer data breach, says passport data may be affected

Optus data breach: what to do to safeguard yourself against identity theft

These are the best firewalls right now

Three weeks ago, Optus confirmed that data from both current and former customers had been accessed. The threat actors managed to obtain customer identity data, including names, dates of birth, phone numbers, as well as email addresses, of millions of people. Some customers have also had physical addresses, ID document numbers such as driver's licenses or passport numbers exposed, as well.

Optus did not state who was behind the attack, what the motives of the threat actor were, nor how the systems ended up being compromised (for example, with phishing, or malware ). It did say that it managed to immediately shut the attack down.

It also declined to say how many customers might have been affected by the breach, but given its user base, the number could be as high as about 10 million individuals. Here's our rundown of the best ID theft protection services for families right now



======================================================================
Link to news story: https://www.techradar.com/news/optus-breach-new-investigations-launched-millio ns-in-fines-on-the-table/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)