Optus Data Breach - what you need to know
You may have heard reports in the media about an Optus Data Breach that involves the possible unauthorised access of millions of current and previous Optus customers.
You can read more about the cyberattack via the Optus website, refer to mainstream news outlets or go to government websites such as the ACCC’s Scam Watch website.
Upon discovering this, Optus immediately shut down the attack. Optus is working with the Australian Cyber Security Centre to mitigate any risks to customers. Optus has also notified the Australian Federal Police, the Office of the Australian Information Commissioner and key regulators.
In a nutshell, customer data such as mobile numbers, addresses and ID data such as driver licences and passport numbers can be used by criminals to conduct phishing scams, ID takeover and compromised accounts.
We are not currently aware of any members having suffered harm, but we encourage you to have heightened awareness across your accounts.
As we want to help keep you and your money safe, we’re reaching out to all our members to let you know what you can do to be extra vigilant with your banking following this report.
What can I do?
• Regularly monitor activity on your accounts and report any unauthorized activity, such as purchases you didn’t make. Don’t wait for your tri-annual statement - internet Banking and mobile banking offer quick access to review transactions on your accounts.
• Never provide your personal details to anyone who contacts you by phone, even if the call seems legitimate.
• Take care when responding to emails and SMS. Never give out your personal details or click on any links
• If in doubt, request a copy of your credit report to check for any loans being taken out in your name. You can also request a ban on your credit report
• Set up alerts on your accounts so you can be notified within seconds when money is withdrawn from your account (you can set up alerts yourself via Internet Banking)
• Change any online banking and email passwords, or other passwords on websites or apps that payments are made from.
• Look out for potential contact from scammers who may have your personal information. This may include suspicious emails, texts, phone calls or messages on social media.
• We recommend you review the limits on your accounts. Our standard limit for external transfers is $2,500. If you have a higher limit in place for some reason on any of your banking accounts, you should reduce these limits back to the bank’s standard limit.
How do we protect your data At Community First, it’s a priority to help protect our members which includes ensuring your information is always secure. We protect your personal information from misuse, interference, loss, unauthorised access or disclosure and modification. The Community First layered security safeguards in place are extensive - the following outlines a list of how we protect your data:
• We tightly control where your data is stored with significant security • We have in place access controls & intrusion detection systems
• We conduct vulnerability scans, including targeted penetration tests of critical systems which is performed by independent experts
• We monitor for suspicious payment activity • All data exchanges are performed using secure methods Where to find more information
• Learn how to protect yourself from scams by visiting the ACCC’s Scam Watch website scamwatch.gov.au
• Learn more about identity theft at moneysmart.gov.au and search ‘identity theft’
• Learn more about identity fraud, how to protect yourself or respond to a data breach notification at oaic.gov.au
• If you are concerned that your identity has been compromised or you have been a victim of a scam contact us immediately and call IDCARE on 1800 595 160. IDCARE is Australia’s national identity and cyber support service, to get expert advice from a specialist identity and cyber security service. You can also report scams to Scamwatch scamwatch.gov.au and check cyber.gov.au for information about cyber security.
Community First Credit Union LimitedABN 80 087 649 938 | Operating as Community First Bank | AFSL and Australian credit licence 231204| BSB 512-170