Australia Sues Singtel’s Optus Over 2022 Cyber Attack

On Wednesday, Singapore Telecommunications (STEL.SI)-owned telecom provider Optus announced it was being sued by Australia’s media regulator over a September 2022 cyber attack

The No. 2 telco in Australia was the target of a massive data breach in September 2022, which exposed customers’ confidential information, including phone numbers, passports, and residential addresses. 

In the wake of the incident, Prime Minister Anthony Albanese advocated for more stringent privacy regulations that would compel organizations to inform financial institutions of comparable breaches promptly.

Approximately 40 percent of the population, or 10 million Australians who are Optus customers, could not use their smartphones, landlines, or broadband internet for most of the day of the breach. 

According to the Australian Communications and Media Authority, Optus Mobile neglected safeguarding its customers’ personally identifiable information against unauthorized access or interference.

As the case progresses to court, Optus has been cooperating with the authorities and taking the necessary measures to mitigate the situation, according to the company. 

Optus added that it could not ascertain the proportion of potential penalties and would defend the proceedings. 

Optus, one of Singtel’s most significant overseas investments, has recently encountered public censure following a 12-hour network outage that impacted over 10 million Australians.

The then-CEO of Optus, Kelly Bayer Rosmarin, tendered her resignation in November 2023 after the cyber attack and the nationwide disruption that occurred the previous year.