For each individual the breach includes combinations of documents, a list of which can be found below. The following information is provided to keep you informed, to avoid any unnecessary costs associated with replacing documents and to guide you through any additional recommendations. Please note: for driver licence, passport or Medicare the recommendation is engagement with the 3 CRA’s.
IDCARE recommends you contact your financial institution/s to let them know that your personal details have been compromised. Please cancel any compromised debit or credit cards. Request to have tighter security on your account i.e. add a security question only you would know the answer to, or a new PIN, etc. It is also recommended to change your passwords, ensuring they are strong and individual, after you have updated and run anti-virus software on your device.
Driver licence (DL):
If only your details have been compromised and you still have the physical document, it does not affect your ability to use this document with regards to transport matters. However, this information may be used to access products and services from other organisations, including opening new lines of credit in your name. If you were to replace your DL it would be issued with the same DL number. In some states/territories the card number of the document may change, however when applying for a new credit account most organisations will only ask for the DL number (not the card number) when verifying identity. In Victoria and Queensland you may be able to request a new DL number if you have been a victim of fraud, and you can prove that your DL was used to commit a crime. However, other states/territories have different regulations and in most cases a new DL number is not achievable.
If only your details have been compromised, and you still have the physical document, it does not affect your ability to use this document with regards to travel matters. However, this information may be used to access products and services from other organisations, including opening new lines of credit in your name. Another step towards securing your identity would be to consider renewing the compromised passport. The new passport will be issued with a different passport number. This may be helpful as many credit providers utilise the Document Verification Service (DVS). The DVS is a national online system that allows organisations to compare a customer’s identifying information with government records. The DVS tells a credit provider if a document (such as a passport) is valid or not. If the passport has been renewed the answer will come back as a ‘Not Valid’. Please Note: Not all organisations utilise the DVS, therefore renewing a passport will not guarantee full protection, however it will reduce the risk.
Medicare, Centrelink, myGov, Child Support, My Aged Care (Dept of Human Services - DHS):
If you have experienced the compromise of any information relating to these departments you may contact the Identity Support and Response Team (ISAR) 1800 941 126 (8am-5pm AEST Mon to Fri) and let them know about the compromise. They will guide you through the process, and where appropriate, direct you to other departments within DHS in order to protect these credentials.
It is recommended that you contact the ATO on 1800 467 033. Explain your situation and request to have security increased around your Tax File Number (TFN). Your ABN however, is open for public viewing and therefore the ATO does not place any additional security around this. You can ask to have an ‘alert’ placed on your tax file and/or voice recognition activated to ensure no one other than yourself is able to lodge, or alter a tax return in your name.
As this is considered a ‘high risk’ event it would be recommended to inform the agencies of the compromise and ask them to increase security around your account. Where possible, request to have tighter security on your account i.e. add a security question only you would know the answer to, or a new PIN, etc. It is also recommended to change your passwords, ensuring they are strong and individual, after you have updated and run anti-virus software on your device.