OPTUS DATA BREACH RESPONSE

IDCARE is supporting individuals who are impacted by the recent Optus data breach. If you are concerned about the Optus data breach, please see the below information.

The State and Territory driver licence issuers have updated the processes and costs for the reissue of driver licences, and whether this will include a change of driver licence number, for those impacted by the Optus data breach. This information is being actively updated below as it is confirmed.

IDCARE recommends that you consider the steps outlined below or in our Optus Data Breach Response Fact Sheet.

If you become aware that someone has misused your compromised credentials, please complete the IDCARE Get Help web form.

Credentials Exposed

For the majority of customers, the information exposed included customer name, date of birth, phone number, email address, and residential or business address. Some customers also had exposure of their Australian Business Number, Australian Company Number, driver licence customer reference number, driver licence card number, proof of age card details, Medicare card details or passport number.

Payment details and account passwords have not been compromised.

Current Related Scam Activity

Be aware that just because you receive a scam call, that does not mean that the scammer has your data and knows you were impacted by the Optus Data Breach. Scammers will be randomly calling, emailing and messaging numbers knowing that many of these will reach individuals impacted by the Data Breach.

myGov Impersonation Scam

IDCARE is aware of a myGov impersonation text message scam requesting you to update your details.

Don’t click on the link! Always contact organisations independently via verified means. Australian Government agencies will never send you a link to login pages via SMS or email. Emails with hyperlinks will only be sent to your myGov inbox, not your personal email account.

If you clicked the link in an SMS or email, contact myGov immediately via:

IDCARE also recommends logging in to your myGov account to check across all linked accounts:

  • your contact details, including email address and phone number, remain unchanged;
  • multi factor authentication is enabled;
  • your linked services, such as the ATO or Centrelink, remain unchanged. 
  • nbn Impersonation remote Access Scam

nbn Impersonation Remote Access Scam

IDCARE is aware of an NBN impersonation scam advising individuals of government mandates for all Optus clients. Scammers may:

  • Explain that there is a requirement for an upgrade from copper based to fibre optic cabling.
  • Advise you must download applications onto your device/s to initiate this process.
  • Ask that you pay a delivery fee for a new modem.
  • Seek to book you an appointment with a technician from the NBN.
  • Request access to your device/s and ask you to leave the room where the devices are located.

If you receive an unsolicited call from the NBN requesting the above, hang up.

You can find updates from NBN about what is happening at your address here: https://www.nbnco.com.au/residential

Reducing the risks

If you are concerned about your identity being misused, there are some precautionary steps you may wish to take.

Response Recommendations by Credentials

IDCARE has formed response recommendations relating to the credentials exposed as a result of the Optus Data Breach.

Join the global list of organisations making a real difference in people’s lives by supporting our service.

Copyright © 2025, IDCARE. All Rights Reserved.

ABN 84 164 038 966