Over 100,000 Optus Customers Sue Over 'Extremely Serious' Data Breach
Over 100,000 current and former Optus customers have registered for a class action following a data breach that exposed sensitive information. The breach, which occurred in September 2022, affected up to 10 million customers, including vulnerable groups like domestic violence victims and frontline workers. Slater and Gordon, the law firm leading the action, describes the breach as 'extremely serious'.
More than 10,000 customers' personal information was published online after ransom demands were made. This data included names, dates of birth, addresses, and driver's license and passport numbers. The class action alleges Optus breached contractual obligations, its duty of care, and various laws by failing to protect customer data. Lead applicants express feelings of vulnerability, exposure, worry, and stress due to the breach and its potential consequences. They seek compensation for losses, including replacement of identity documents and measures to protect privacy, as well as damages for distress. Optus is accused of failing to destroy or de-identify former customers' personal information and failing to control access to it, even after the breach was discovered.
Slater and Gordon has filed the class action against Optus on behalf of affected customers. The firm argues that Optus' actions were a breach of privacy, telecommunication, consumer laws, and its internal policies. The class action seeks to hold Optus accountable for the harm caused to customers and to ensure they are compensated for their losses and distress.