The Australian Communications and Media Authority says a coding error on a dormant website that went undetected for four years was behind a massive data breach that exposed the information of close to 10 million Optus customers, with the regulator saying the hack was “not highly sophisticated”.
A judge overseeing several cases against Optus over a September 2022 data breach has raised the possibility of hearing a class action against the telco alongside new proceedings brought by the Australian Communications and Media Authority.
Optus has lost its appeal of a decision that found the telco could not claim legal professional privilege over a Deloitte report into a major data breach, with an appeals court highlighting the lack of evidence from former CEO Kelly Bayer Rosmarin.
The Australian Communications and Media Authority has brought proceedings against Optus over a September 2022 data breach that comprised the data of up to 10 million customers, the first lawsuit filed by a regulator following a string of major cyberattacks over the past two years.
Optus has denied that it ‘cloaked’ the true dominant purpose of a Deloitte report into a major data breach in 2022, arguing on appeal that the report was privileged and that a class action should not have access to it.
Optus has paid a $1.5 million penalty after an investigation by the Australian Communications and Media Authority revealed breaches of public safety rules.
A judge has quashed the OAIC’s decision to reject a second class action-style complaint filed over the massive Optus data breach, finding the Privacy Act does not bar second-in-time proceedings.
A nationwide Optus outage left 2,696 customers unable to place calls to 000, more than ten times what the telco originally estimated.
Optus has lodged an appeal of a judgment that found the teleco could not claim legal professional privilege to shield from a class action a report by consulting giant Deloitte into last year’s major data breach.
The CEO of Optus has denied it has to compensate small businesses who allegedly suffered losses during a nationwide outage that left over ten million customers without coverage or pay a penalty for 228 emergency calls to 000 that failed.