Tag Archives: oceania

'I'm not the only one': Mum blackmailed after Optus data breach

A mother whose personal details were leaked during the Optus data breach is facing another threat after being sent a text message by a supposed hacker.

Belinda Smith is being blackmailed by someone asking for $2000 because the telco giant refused to pay a ransom.

"I got a text message from a supposed hacker asking for $2000 cash because Optus haven't paid their ransom of the $1 million," she told 9News.

READ MORE: Optus hacker's 'bizarre' backflip after $1m threat

Belinda Smith is now being blackmailed after the Optus data breach.

To make matters worse, her five-year-old son has cancer.

The text Belinda received last night read: "Hello, Optus has left security measures allowing us to access the personal information of their customers including name, email, phone number, date of birth, address and license (sic) number.

"Optus has since not responded to our demand of paying the $1m USD ransom.

"Your information will be sold and used for fraudulent activity within 2 days or until a payment of $2,000 AUD is made then the confidential information will be erased off our systems."

READ MORE: Melissa Caddick's husband had 'no idea' of fraud

https://twitter.com/cokeefe9/status/1574645439462506501

The text then has bank transfer details and asks the recipient to send a screenshot once the transaction is complete.

"I guess they are just trying to pressure people into paying the $2000, because I assume I'm not the only one who received that text message and hope that some people send them the money," Smith said.

This afternoon the Commonwealth Bank said it has identified and blocked the account soliciting deposits in exchange for data erasure.

READ MORE: Young Russians flee country as conscripts for Ukraine war handed rusty weapons

Earlier, an anonymous online account claiming to be behind the Optus cyber attack bizarrely apologised for the hack, pledging not to make public the information of almost 10 million Australian customers.

Hours before that, several cybersecurity experts flagged a post by the same anonymous account in which it claimed to have already publicly released the stolen private information of 10,000 customers.

That post also included a threat to release more batches each day for the next four days unless demands are met.

What do I do if my details have been hacked in the Optus data leak?

The federal government has been scathing in its criticism of Optus, following the leak of millions of users' personal data.

It was revealed this morning that Medicare numbers were exposed in the data breach. 

Previously Optus revealed the leak had included names, dates of birth, email addresses, phone numbers, postal addresses, drivers' licence numbers and passport numbers.

READ MORE: Hacker claiming Optus attack apologises in new online post

The original ransom demand was posted online on Friday afternoon.

But it had not revealed Medicare details had also been compromised.

"Medicare numbers were never notified as forming part of the breach," Attorney-General Mark Dreyfus said.

"Consumers have also got a right to know exactly what individual personal information has been compromised in Optus's communications to them."

Dreyfus said the Australian Federal Police is "devoting huge effort" to catch the culprit.

State and territory police as well as the USA's FBI have also been involved.

How do I know what data has been exposed?

The onus is on Optus to tell you if your data has been breached. So far the telco has informed many customers and former customers their information has been exposed.

But the telco is yet to say specifically what data was breached from what user.

The Office of the Australian Information Commissioner (OAIC) said people can check the Optus website or contact the telco via the app or by calling 133 937.

You can also make a privacy complaint to the OAIC, but you will need to contact Optus first.

READ MORE: Optus could face class action over massive data breach

Email to customer about the Optus cyberattack.

What do I do if my data has been hacked?

Optus has engaged the cybersecurity company IDCare to support customers with their data exposed.

The IDCare website has a form customers can fill out as a first step.

But the company has warned their case managers are dealing with a high number of calls because of the breach.

Visiting the Australian Cyber Security Centre will give useful information to find out if my data has been exposed.

You should not use non-government sites to check if your data has been exposed.

Sites which ask for your personal details to find out if you have been hacked are often just data gathering sites for nefarious actors.

READ MORE: What to do if you've been targeted by the Optus cyber attack

What can happen if my details are hacked?

For most people, the biggest risk will be identity theft.

A person could use your data to open a bank account or the like, and possibly seek a loan.

Victims have also been blackmailed from the Optus breach, with some customers contacted already demanding money to keep their data private.

But Alastair MacGibbon from CyberCX told 9News there could be fatal consequences.

"If you were a person that has fled a violent relationship and you are currently in hiding from your former partner, and your address has now been basically stolen by a criminal," he said.

"For the vast bulk of us, it means we are more likely to be scammed, have things like our identity stolen, but for a certain subset of people, it does pose a threat to their safety."

What should I be on alert for?

If your data has been leaked, you may become a target for scammers.

Dreyfus has urged all Optus customers to be vigilant.

"Do not click on any links in a text message," he said.

"Check all website sources – just check that it is an official website before taking any future action.

"If you are unsure about why you are being asked to divulge private information, stop and verify who the person or organisation is that is making that request of you."

Optus customers have had their personal details leaked.

Has my account definitely been leaked?

If you have been an Optus customer anytime between 2017 and now, your details are most likely in the hands of the hacker.

So far, 10,000 Optus customers have had their details leaked in a way that is publicly accessible.

Earlier on Tuesday the purported hacker claimed the remaining details had been completely deleted.

It is somewhat doubtful the data has been actually deleted. For many nefarious operators, it is better if people believe their personal details are secure.

READ MORE: Optus knew of cyber attack 24 hours before alerting media

Can I change my details?

You can only change certain details among those leaked in the Optus hack.

Obviously you can't change your date of birth, and you'd have to move to change your home address.

If you renew your passport, your new one will have a different number.

But if you get a new Medicare card, it will have the same number on it.

NSW Customer Services Minister Victor Dominello said people in the state can get a new digital drivers licence issued instantaneously via the Service NSW app. A new plastic card will be issued within ten business days.

The new licence will cost users $29, with "reimbursement advice will be issued by Optus to customers in the coming days".

In Victoria, you won't be able to change your driver's licence unless you can prove actual identity fraud has taken place with it, while Queenslanders who were affected by the breach can have a new license provided to them without charge.

Each jurisdiction has different rules about driver's licence numbers.

Should Optus pay the ransom?

The telco has already said it will not pay the $US1 million ransom demanded of it by the purported hacker.

"It is already possible that someone has paid the ransom," MacGibbon said.

"I said earlier that Optus needed to consider the concept of paying the ransom if indeed it would help reduce the chance of threats to the safety of this small subset of people whose data clearly has been stolen.

"It may be that someone has already bought the data from the criminals, which is why they say they have taken it down."

Woman faces criminal charges over $10.5m cryptocurrency transfer

A Melbourne woman is facing criminal charges after more than $10 million was mistakenly transferred into her bank account by a cryptocurrency trading platform.

In May 2021, Crypto.com intended to refund Thevamaogari Manivel $100, but the 37-year-old was instead erroneously transferred $10,474,143.

The company did not notice its mistake for seven months, until December 2021.

READ MORE: Optus hacker's 'bizarre' backflip after $1m threat

A Melbourne woman is facing criminal charges after more than $10 million was mistakenly transferred into her bank account by a cryptocurrency trading platform.In May 2021, Crypto.com intended to refund Thevamaogari Manivel $100, but the 37-year-old was instead erroneously transferred $10,474,143.

Crypto.com commenced legal action against Manivel and others in the Victorian Supreme Court's commercial division in February this year.

The company was granted a freeze on her Commonwealth Bank account, but by then most of the money had been transferred into other accounts.

About $1.35 million was used to buy a home in Craigieburn, with the ownership of the property transferred to Manivel's sister, Thilagavathy Gangadory, who lived in Malaysia, the court heard previously.

READ MORE: Young Russians flee country as conscripts for Ukraine war handed rusty weapons

Manivel faced Melbourne Magistrates Court on Tuesday after being charged with two dealing with proceeds of crime offences.

She appeared by video link from prison.

Defence lawyer Jessica Willard said Manivel was told she had won the money by one of the co-accused offenders.

She has been charged with dealing with proceeds of crime "namely $10,474,143 AUD mistakenly transferred into her bank account from Crypto.com while being negligent as to whether or not it is proceeds of crime", court documents reveal.

READ MORE: Melissa Caddick's husband had 'no idea' of fraud

Manivel has also been charged with dealing with $11,750 of cash, suspected to be the proceeds of crime, in Tullamarine on March 17, 2022.

The matter will return to court on October 11.

First sign La Niña and the wet weather it brings is returning

Rain heading for much of Australia this week is consistent with the return of the La Niña weather system, forecasters say.

Weatherzone experts say showers and thunderstorms forecast for Darwin in the NT this week are earlier than usual, a key sign of the system which brings a wet summer.

"In a normal year, the northern rainfall onset typically occurs in parts of coastal Queensland and the NT's Western Top End around late October or early November, before spreading to other areas of Australia's tropics in the following weeks," Weatherzone's Ben Domensino said.

READ MORE: Optus hacker's 'bizarre' backflip after $1m threat

Rain heading for much of Australia this week is consistent with the return of the La Niña weather system, forecasters say.

"However, during La Niña periods, the rainfall onset usually comes a bit earlier than usual, typically around early-to-mid October for large areas of the NT, Queensland and far northern WA."

READ MORE: Melissa Caddick's husband had 'no idea' of fraud

The heaviest rain over the tropics during the next week is likely over WA's North Interior and the NT's Western Top End, forecasters say.

Some inland areas of WA could see 100 to 200 mm of rain.

Earlier this month, Bureau of Meteorologists predicted a third-consecutive La Niña event for Australia, meaning wet conditions will likely continue into summer.

READ MORE: Young Russians flee country as conscripts for Ukraine war handed rusty weapons

The Bureau of Meteorology confirmed La Niña is underway in the Pacific Ocean.

"Models indicate this La Niña event may peak during the spring and return to neutral conditions early in 2023," the bureau said.