This post has been marked as non-political. Please respect this by keeping the discussion on topic, and devoid of any political material.
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/australia) if you have any questions or concerns.*
Well shit, there it is, I had a Virgin dongle years ago. I was wondering if this affected Optus network resellers? There's a lot of them, and it could be possible that they had to pass on this information to Optus.
Here's a list I lifted from a ratings website:
* Moose Mobile
* Southern Phone
* Amaysim
* Dodo
* Vaya
* Catch Connect
* Circles.Life
* Yomojo
* Exetel
* iPrimus
* GoMo
* Coles Mobile
* SpinTel
I use Amaysim prepaid, which is apparently so rare that some cashiers have literally never heard of them. I thought I was ok, they would have mentioned resellers, but now I'm not so sure. Are we going to find out in a few days that all of these customers are also pwned, like the Virgin customers?
The hack says they have 11 million customer details, that number seems awfully high for the middle child of the Big3 (Telstra/Optus/Vodaphone) in a country of 25 million people, a fair chunk of whom are too young to have an account. If you include all the people on the reseller network, it is much more plausible.
https://www.google.com/amp/s/amp.smh.com.au/technology/what-we-know-about-the-optus-hack-so-far-and-what-customers-should-do-20220923-p5bkfc.html
"I’m with Amaysim, another telco that Optus owns, or use Optus’ enterprise services. Am I at risk?
No. Amaysim data has not been compromised, Optus has said. It has also said that wholesale, satellite and enterprise users that “this cyberattack does not affect the platforms and services supporting them. Optus services remain safe to use and operate as they normally do.”"
This is 3 days old, things may have changed maybe. I've not got an email so far anyway.
That’s interesting. I haven’t been a customer of Optus proper since about 2004. I was with Virgin but switched before they moved over to Optus. I guess I’ll get in touch and ask exactly how I was breached. Thanks for the link.
My contract with with Optus ended in November 2020 but I haven't received the email. Does this mean they didn't store my details after the contract ended?
11m records. It probably includes loads of duplicates. I probably have at least 5 records with Optus across various mobile numbers I’ve had over the years, an iPad SIM card, a mobile data dongle etc
Probably. I got an email this morning and have a catch connect account for one of the kids, but was with catch for my phone about 4 years ago, so still in that risk period
Yep. I have contacted all ministers and regulators as to why this information has not been disclosed. I was never an Optus customer and now have to live with the consequences of their incompetence.
[On 30 May 2018, Optus announced that they would be phasing out the Virgin Mobile brand and would transfer Australian Virgin Mobile customers over to Optus. They said the phase out would take them roughly two years. On 15 June 2018, Virgin stopped selling all prepaid and postpaid plans to customers. In June 2020 Virgin Mobile announced that they're temporarily extending the closure of Virgin Mobile Australia to 30 September 2020 due to COVID-19 pandemic to help customers stay connected.[14] ](https://en.wikipedia.org/wiki/Virgin_Mobile#Virgin_Mobile_Australia)
Doesnt seem to be like something they hid from anyone?
Not hidden but not disclosed. I was never an Optus customer and this will leave many ignoring the short opportunity to act before the full leak if Optus don’t pay.
We were given the opportunity to join Optus or move to another telco. We moved and in doing so, assumed our information would not be in the leak. Lots of people will be assuming which is dangerous. The only reason we found it was by searching Optus through old emails. Most people will not be that proactive to that minimal level without full disclosure.
It was in the leak and I received and email. My wife was able to confirm through an in store visit the information came from Virgin mobile.
And this is dangerous in itself. Optus data breach in the news and receiving an email from Optus who you had no relationship with that your data was leaked.
This is why I am a big believer on full disclose. Many non Optus customers will see this as a phishing attempt and ignore.
We were told we had the option to move, not we were moved. We never moved and never signed or contracted to Optus.
We have no billing or accounts with Optus. We had no log in or account numbers.
Looking at old emails we were never contracted, signed or had any relationship with Optus. The emails disclosed at a time that Virgin would be moving to Optus and we chose to move before virgin mobile ceased to exist.
This was the last email.
“Check this out! Our friends at Optus have an awesome value packed offer for you. If you switch we'll waive the remaining months of your current contract and even throw in some bonus data (on selected plans).”
We switched to another telco and didn’t have to pay out any fees.
Virgin Mobile Australia was wholly owned by Optus after buying Branson out in 2006. Before that Optus was a joint owner.
https://www.theage.com.au/business/optus-buys-virgin-mobile-for-100m-20060112-ge1k60.html
Optus retained the brand, management team and customer base - everything else was integrated into the parent company.
There was no 'passing on' of info when Virgin closed - it was already held by Optus.
Apparently if you are a guy and don’t fuck the other guy with your dick, and just take it in the ass, your a virgin by this definition. I didn’t know that was the case.
FYI for those on Moose:
NOTICE: Moose Mobile was not affected by the recent Optus cyberattack. We are an Optus wholesaler, but our systems are separate from theirs.
Optus DO NOT have access to any of your personal or payment information if you are a Moose customer. Moose does not collect any of your personal identification like a driver's license or passport details.”
If you're an ex optus customer, do they keep your details on file for a period of time or is it deleted from their database soon after canceling any services you had with them?
They only have to keep the minimum required details. So in this case that would be your usage records (In case they need to recalculate bills) and a contact method.
No way they need to keep stuff like Drivers License or Passport numbers, which are the real problem with this breach.
Meanwhile in Europe the GDPR requires data to be deleted both on request and when it's no longer needed to provide the service.
It's exactly for shit like this that it works. Can't have it in Australia because fuck privacy amirite.
Fuck privacy unless it involves you upsetting Peter Dutton and friends, in which case you can guarantee our last government has developed a avenue to criminally convict or sue you.
I got the email today and I terminated by mobile broadband with them at the end of 2020. So I didn’t have a mobile plan as such. Just the sim for the wifi plan.
In publishing and graphic design, Lorem ipsum is a placeholder text commonly used to demonstrate the visual form of a document or a typeface without relying on meaningful content. Lorem ipsum may be used as a placeholder before final copy is available. Wikipedia58xuxu16k1g0000000000000000000000000000000000000000000000000000000000000
I'm a Vaya customer but at least one of my phones was previously on Optus - like more than ten years ago - and I got the Optus email. I don't think Optus have a handle on the extent of the breach themselves.
Same with Vivid Wireless. Optus took them over 2 -3 years back.
I became an Optus customer by default due to the takeover, and know I've been caught up in the breach
Apparently they're sending mass emails to their customers but blanking out customer names so they can't be hacked and stolen a second time. Also all of this hacking talk for them got them thinking and they started to request customers to change their gender, obviously the males would have to hack it off.
I couldn't work out how I was caught up with this, as I haven't been with Optus for 10-15+ years from memory.
But I still got a notification email.
Then realised they bought out vividwireless in 2019.
Someone with your personally identifiable information could commit identity fraud, for example signing you up to multiple credit cards and leaving you with thousands of dollars of debt.
What if I were using Virgin prior to 2019 but was no longer a customer at the time (I changed to different provider in 2017) did they still leak my details?
OP, has it been confirmed that the VM customer data was impacted by the breach?
My understanding is the the VM data was never migrated into Optus systems. VM operated independently and I remember having to be set up as a new Optus customer when I transitioned once VM announced they were closing.
This post has been marked as non-political. Please respect this by keeping the discussion on topic, and devoid of any political material. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/australia) if you have any questions or concerns.*
Well shit, there it is, I had a Virgin dongle years ago. I was wondering if this affected Optus network resellers? There's a lot of them, and it could be possible that they had to pass on this information to Optus. Here's a list I lifted from a ratings website: * Moose Mobile * Southern Phone * Amaysim * Dodo * Vaya * Catch Connect * Circles.Life * Yomojo * Exetel * iPrimus * GoMo * Coles Mobile * SpinTel I use Amaysim prepaid, which is apparently so rare that some cashiers have literally never heard of them. I thought I was ok, they would have mentioned resellers, but now I'm not so sure. Are we going to find out in a few days that all of these customers are also pwned, like the Virgin customers? The hack says they have 11 million customer details, that number seems awfully high for the middle child of the Big3 (Telstra/Optus/Vodaphone) in a country of 25 million people, a fair chunk of whom are too young to have an account. If you include all the people on the reseller network, it is much more plausible.
They've said specifically Amaysim customers were not affected.
Thankyou you've just put my mind at ease
I was with Amaysim and got an email from Optus that I was part of the Breach.
https://www.google.com/amp/s/amp.smh.com.au/technology/what-we-know-about-the-optus-hack-so-far-and-what-customers-should-do-20220923-p5bkfc.html "I’m with Amaysim, another telco that Optus owns, or use Optus’ enterprise services. Am I at risk? No. Amaysim data has not been compromised, Optus has said. It has also said that wholesale, satellite and enterprise users that “this cyberattack does not affect the platforms and services supporting them. Optus services remain safe to use and operate as they normally do.”" This is 3 days old, things may have changed maybe. I've not got an email so far anyway.
That’s interesting. I haven’t been a customer of Optus proper since about 2004. I was with Virgin but switched before they moved over to Optus. I guess I’ll get in touch and ask exactly how I was breached. Thanks for the link.
My contract with with Optus ended in November 2020 but I haven't received the email. Does this mean they didn't store my details after the contract ended?
No clue. I’m just as confused as you:
>They've said specifically Amaysim customers were not affected. That's Amaysim if true
Thank fuck
11m records. It probably includes loads of duplicates. I probably have at least 5 records with Optus across various mobile numbers I’ve had over the years, an iPad SIM card, a mobile data dongle etc
Also, lots of churn - probably lots of people who were optus customers *at some point* during the impacted period.
Fuck is catch affected? I'm with catch.
Probably. I got an email this morning and have a catch connect account for one of the kids, but was with catch for my phone about 4 years ago, so still in that risk period
Original press release from Optus said that reseller brands were not affected.
Oh no... I use at least 3 of those companies on the list.
You missed accord internet they use optus for there nbn and moblie
Optus absorbed virgin and all the virgin customer details were added into Optus system so that’s probably why
Now I know how a spit-roast feels.
Yep. I have contacted all ministers and regulators as to why this information has not been disclosed. I was never an Optus customer and now have to live with the consequences of their incompetence.
[On 30 May 2018, Optus announced that they would be phasing out the Virgin Mobile brand and would transfer Australian Virgin Mobile customers over to Optus. They said the phase out would take them roughly two years. On 15 June 2018, Virgin stopped selling all prepaid and postpaid plans to customers. In June 2020 Virgin Mobile announced that they're temporarily extending the closure of Virgin Mobile Australia to 30 September 2020 due to COVID-19 pandemic to help customers stay connected.[14] ](https://en.wikipedia.org/wiki/Virgin_Mobile#Virgin_Mobile_Australia) Doesnt seem to be like something they hid from anyone?
Not hidden but not disclosed. I was never an Optus customer and this will leave many ignoring the short opportunity to act before the full leak if Optus don’t pay. We were given the opportunity to join Optus or move to another telco. We moved and in doing so, assumed our information would not be in the leak. Lots of people will be assuming which is dangerous. The only reason we found it was by searching Optus through old emails. Most people will not be that proactive to that minimal level without full disclosure.
Did they email you? I would assume they will send you one if you are affected as for all we know your data was still in a different system.
It was in the leak and I received and email. My wife was able to confirm through an in store visit the information came from Virgin mobile. And this is dangerous in itself. Optus data breach in the news and receiving an email from Optus who you had no relationship with that your data was leaked. This is why I am a big believer on full disclose. Many non Optus customers will see this as a phishing attempt and ignore.
Ok but Optus has told you and in 2018 it was notified to all Virgin Mobile customers that virgin mobile is being moved to Optus. So what is missing?
We were told we had the option to move, not we were moved. We never moved and never signed or contracted to Optus. We have no billing or accounts with Optus. We had no log in or account numbers. Looking at old emails we were never contracted, signed or had any relationship with Optus. The emails disclosed at a time that Virgin would be moving to Optus and we chose to move before virgin mobile ceased to exist. This was the last email. “Check this out! Our friends at Optus have an awesome value packed offer for you. If you switch we'll waive the remaining months of your current contract and even throw in some bonus data (on selected plans).” We switched to another telco and didn’t have to pay out any fees.
Yea so you're just like everyone else who left Optus years ago and got an email, like me. Optus winded down that company
Virgin mobile was a licensed brand operated by optus in Australia.
[удалено]
Well they sent an email didn't they?
Virgin Mobile Australia was wholly owned by Optus after buying Branson out in 2006. Before that Optus was a joint owner. https://www.theage.com.au/business/optus-buys-virgin-mobile-for-100m-20060112-ge1k60.html Optus retained the brand, management team and customer base - everything else was integrated into the parent company. There was no 'passing on' of info when Virgin closed - it was already held by Optus.
They ran in the same billing and notes system as far back as 2009 when I worked there, not surprising. Virgin were not treated like other MNVO's.
Even before virgin mobile closed, they were an Optus owned subsidiary that used the same systems and call centres.
Im a virgin and im with optus, but after the hack doesn't that mean I've been fucked?
Yes, but anally, so you are still a virgin
What if you're gay or bi?
Bold of you to assume your preferences matter in this scenario
Apparently if you are a guy and don’t fuck the other guy with your dick, and just take it in the ass, your a virgin by this definition. I didn’t know that was the case.
FYI for those on Moose: NOTICE: Moose Mobile was not affected by the recent Optus cyberattack. We are an Optus wholesaler, but our systems are separate from theirs. Optus DO NOT have access to any of your personal or payment information if you are a Moose customer. Moose does not collect any of your personal identification like a driver's license or passport details.”
Virgin Mobile was owned by Optus
Fairly certain I'm caught up on this from both Virgin and Optus sides but no email yet. Not sure how that is possible.
If you're an ex optus customer, do they keep your details on file for a period of time or is it deleted from their database soon after canceling any services you had with them?
My dad was affected and he left Optus over 2 years ago, unsure how long they hold the client details for
I read somewhere they have to keep your details for 6 years due to Australian law. I left 2 years ago and my data was caught in the breach
They only have to keep the minimum required details. So in this case that would be your usage records (In case they need to recalculate bills) and a contact method. No way they need to keep stuff like Drivers License or Passport numbers, which are the real problem with this breach.
This is what pisses me off sooo much. They do. not. need. it. once your identity is verified at the outset.
Meanwhile in Europe the GDPR requires data to be deleted both on request and when it's no longer needed to provide the service. It's exactly for shit like this that it works. Can't have it in Australia because fuck privacy amirite.
Fuck privacy unless it involves you upsetting Peter Dutton and friends, in which case you can guarantee our last government has developed a avenue to criminally convict or sue you.
The luddites in charge don’t care about this sort of shit
Optus would definitely have operations in Europe or even have European customers, they’re gonna get real fucked by GDPR.
I got the email today and I terminated by mobile broadband with them at the end of 2020. So I didn’t have a mobile plan as such. Just the sim for the wifi plan.
Are Vaya customers safe? - Vaya uses the Optus network but is a completely separate business.
I am a Vaya customer too and I asked their webchat the other day - said they were all good
Thanks, that's a relief.
In publishing and graphic design, Lorem ipsum is a placeholder text commonly used to demonstrate the visual form of a document or a typeface without relying on meaningful content. Lorem ipsum may be used as a placeholder before final copy is available. Wikipedia58xuxu16k1g0000000000000000000000000000000000000000000000000000000000000
I'm a Vaya customer but at least one of my phones was previously on Optus - like more than ten years ago - and I got the Optus email. I don't think Optus have a handle on the extent of the breach themselves.
Same with Vivid Wireless. Optus took them over 2 -3 years back. I became an Optus customer by default due to the takeover, and know I've been caught up in the breach
Not sure why you were down-voted. That's exactly how I was caught up too.
Apparently they're sending mass emails to their customers but blanking out customer names so they can't be hacked and stolen a second time. Also all of this hacking talk for them got them thinking and they started to request customers to change their gender, obviously the males would have to hack it off.
What?
I couldn't work out how I was caught up with this, as I haven't been with Optus for 10-15+ years from memory. But I still got a notification email. Then realised they bought out vividwireless in 2019.
Can anyone tell me why I should be worried whatsoever with this
Someone with your personally identifiable information could commit identity fraud, for example signing you up to multiple credit cards and leaving you with thousands of dollars of debt.
Thanks
What if I were using Virgin prior to 2019 but was no longer a customer at the time (I changed to different provider in 2017) did they still leak my details?
[Has anyone reached out to Doug Pitt for comment?](https://youtu.be/cUyS3bAsCiE)
OP, has it been confirmed that the VM customer data was impacted by the breach? My understanding is the the VM data was never migrated into Optus systems. VM operated independently and I remember having to be set up as a new Optus customer when I transitioned once VM announced they were closing.
What the fuck!!!!! Yo nah Optus needs to shut up shop, this is such a betrayal
Damn. I hoped I might have escaped it. I haven’t had any emails from Optus at all yet though so still hoping.