6 ms·
Affected Optus customer here (received email indicated I was impacted). They never had my passport details (there have been some links going around when logged
by JamesBrooks 4y ago
Affected Optus customer here (received email indicated I was impacted). They never had my passport details (there have been some links going around when logged in to see the payload of your PI involved in the breach) but they certainly have my name, address, phone number and drivers license number in the data.
Fortunately we're able (in South Australia) to get our drivers licenses changed over free of change if impacted, which I'll do but now that's something else I need to get around to doing... I wonder how many of these costs will be forwarded on to Optus on behalf of the goverment
- pjgalbraith 4y agoI had the exact same experience as you (no passport details leaked). I wonder if the passport data is more for tourists getting Optus sims. Nice to see another South Aussie here!
- chillfox 4y agoWell, it will be whatever you used for your 100 points of ID to open an account to begin with. So most people would have used a drivers license. My guess is that the passports is mostly people without a drivers license.
- collegeburner 4y agowhy in the world did a telco need your drivers license in the first place? i assume you don't have to be a licensed driver to get phone service in australia. edit: hn is rate limiting me but like, any phone number? you need id even for a prepaid one? and why do they need to keep this on file?
- erklik 4y agoVerification of Identity. That's what these documents are used for. It's also why they're so dangerous.
- wolongong942 4y agoShouldn't this be stored temporary with the document deleted straight after passing verification?
- caf 4y agoAustralia doesn't have any kind of national ID card, so a driver's license is the most commonly used form of primary ID.
- ccakes 4y agoMost (all?) states have a proof-of-age card which is functionally equivalent to a drivers license for ID purposes. https://www.sa.gov.au/topics/driving-and-transport/licences/proof-of-age-card https://www.sa.gov.au/topics/driving-and-transport/licences/...
- josephg 4y agoTrue; but most adults have a drivers' license instead. I don't think I know anyone who has a proof-of-age card.
- deleted 4y ago[deleted]
- KnightHawk3 4y agoThe best bit though, it will have a CRN on it. This CRN is the same as your drivers license. (at least in qld) This means using a Drivers License / Proof of Age card is functionaly equivilant.
- paranoidrobot 4y ago'functionally equivalent' except where it's not. There's a bunch of places where they've got some sort of ID requirement that only accepts either a licence or passport. There's a really big assumption in this country that you must have a driver's license, and if you don't well then difficulties arise.
- markmark 4y agoYou have prove your identity to get a phone service. Drivers license is one way of doing that.
- postingawayonhn 4y agoTo get a mobile number in Australia you need to identify yourself with government ID.
- int_19h 4y agoWhy do they keep it after opening your account / activating your SIM, though?
- peterkelly 4y agoBecause they're irresponsible. There's no reason to hang on to this information once they've verified it.
- Reebz 4y agoThat’s incorrect. They are obligated by law to retain it for 6-7 years for KYC purposes.
- collegeburner 4y agoKYC for a gd phone number... honestly the whole attacks on E2EE make a lot more sense now with the background of that kinda shady stuff going on beforehand. praying for y'all, hope the digital rights situation gets better there.
- mastazi 4y agoIn addition to what other siblings already said, in Australia we have a scoring system to prove your identity (called "100 point identification") and depending on the score needed, drivers licence can get you there so it's used very often. This system is for Government entities but private companies often take inspiration from it This is the SA version since GP is from South Australia, all other states have the same thing too https://www.police.sa.gov.au/services-and-events/100-point-identification https://www.police.sa.gov.au/services-and-events/100-point-i...
- mkj 4y agoAn interesting thing is that "100 point ID" applies to physical documents, but somehow it's been conflated with the number on the document being equivalent. One is obviously more easily copied than the other, and scales better for fraudulent use.
- chillfox 4y agoIt's much cheaper to make a computer check the number than pay the post office to sight and verify ID docs.
- prawn 4y agoAlso in SA, and also contacted by Optus. The thing that shits me is that I haven’t been a customer in a couple of years. They really shouldn’t have details unnecessarily stored unless there is some government requirement.