Optus cyberattack could have exposed up to 9 million Australians

Hackers have breached Optus’ systems in one of the largest cyberattacks in Australian history, accessing names, dates of birth, phone numbers, email addresses, physical addresses and driver’s licence numbers of millions of the telecommunications giant’s customers.

Well-placed sources not authorised to speak publicly said that up to 9 million customers had been affected. Many had their contact details exposed to the hackers, who also pilfered even more sensitive details, such as passport and drivers’ licence numbers, for a smaller portion of Optus customers.

What can users do in this case? Resetting the online password is the obvious thing to do. While they said there were no evidence that password were compromised, it is better to be safe than sorry.

What else can be done apart from the normal things that one should do after personal details were exposed?

Update 1: Scamwatch gave the following advices

Steps you can take to protect your personal information include:

  • Secure your devices and monitor for unusual activity
  • Change your online account passwords and enable multi factor authentication for banking
  • Check your accounts for unusual activity such as items you haven’t purchased
  • Place limits on your accounts or ask you bank how you can secure your money
  • If you suspect fraud you can request a ban on your credit report.

Update 2: Optus $US1 million ransom threat investigated

  • 1
    Most of your post was a commentary on tangential topics that did not relate to your question. Your question is what people can do as a result of the breach. Exploring why there was a requirement to store the data or how people could live without a phone is completely tangential.
    – schroeder
    Sep 23 at 7:05
  • 1
    It's not clear, even if your original post, how SIM cards are relevant to this attack or why one would need to replace them. So, focusing the post on the question you end up asking, I'm confused about what it is you actually want to know. It looks like the answer is simply to do all normal things someone should do when their personal details are exposed. Otherwise, it looks like you are asking, "how can we fix Australia's laws on phone companies collecting information?" which we can't tackle on a Q&A site.
    – schroeder
    Sep 23 at 7:18
  • @schroeder I was angry when I first saw the news, hence the rant. Now that I have calmed down, I can see that what I wrote was better suited to social media. Thanks for the edit, my actual (answerable) question was: What can users do apart from the normal things that one should do after personal details were exposed?
    – user283127
    Sep 25 at 5:21
  • Why would it be necessary to do more than "normal"? What else would need to be achieved?
    – schroeder
    Sep 25 at 7:26