Add Category
An online account that claims to be behind the Optus data breach says it has deleted its only copy of customers' information and it no longer cares about a ransom.
- Some critics believe the account is legitimate, but this has not been confirmed by Optus or the Australian Federal Police
- The company says it has contacted every customer affected in the cyber attack
- Its chief executive says Optus is not the "villain" in the situation
The account apologised to 10,200 Australians whose records it claimed to have leaked just hours earlier.
"Ransom not payed [sic] but we don't care any more," the user posted to website BreachForums just before noon on Tuesday.
"Was mistake to scrape publish data in first place."
Some cyber security experts believe the account is legitimate, but it has not been confirmed by Optus, or the Australian Federal Police (AFP).
Late last week, the same anonymous user posted a sample of data ostensibly from the breach, with an offer not to sell the data if Optus paid a $US1 million ransom.
In the account's latest post on Tuesday, they appeared to back down entirely, citing "too many eyes".
"We will not sale [sic] data to anyone," they posted.
"We can't if we even want to: personally deleted data from drive (Only copy)."
The user said they were sorry to the Australians who had had their data leaked.
"Australia will see no gain in fraud, this can be monitored," the post read.
The account also conveyed the author's "deepest apology" to Optus and wished the company well.
The account last week claimed the records included email addresses, dates of birth, first and last names, phone numbers, drivers licence and passport numbers.
Optus chief executive Kelly Bayer Rosmarin told ABC's AM on Tuesday that the company was doing "everything possible to be transparent, to be on the front foot".
Asked about a post last week by a user claiming to be selling the data, she said: "We have seen that there is a post like that on the dark web and the Australian Federal Police is all over that."
Ms Bayer Rosmarin said the company was not "the villains" in the situation and that customers should be on high alert.
The AFP on Monday afternoon said it launched Operation Hurricane to identify the people behind the breach and protect Australians from identity fraud.
Assistant Commissioner Cyber Command Justine Gough said the investigation was going to be complex and lengthy.
“We are aware of reports of stolen data being sold on the dark web and that is why the AFP is monitoring the dark web using a range of specialist capabilities," she said.
"Criminals, who use pseudonyms and anonymising technology, can’t see us but I can tell you that we can see them."
The AFP is working closely with Optus, the Australian Signals Directorate and overseas law enforcement.
Home Affairs Minister Clare O'Neil said she was "incredibly concerned" to hear data from the Optus breach included Medicare numbers, and that customer information had been offered for free and ransom.
She said Medicare numbers were "never advised to form part of the compromised information".
"Consumers have a right to know exactly what individual personal information has been compromised in Optus’s communications to them. Reports today make this a priority," Ms O'Neil said.
Optus said it had been advised by police not to give a number for how many customers have been affected, and that it had contacted all those whose information was compromised in the attack.
Optus customers dating back to 2017 could be at risk of identity theft.
On Monday, Ms O'Neil accused the company of leaving customers data vulnerable to a "basic hack", which Optus has denied.
Loading form...