How to check if your identity has been stolen

Finance companies are scanning the dark web for stolen Aussie identities amid what’s being dubbed the nation’s “worst year for data breaches”.

Finance companies are scanning the dark web in a bid to protect Aussies who had their personal details leaked in what’s being dubbed the nation’s “worst year for data breaches”.

Google searches for ‘identity theft’ in the last month alone have seen a 377 per cent increase amid the fallout of a breach that exposed 10 million current and former Optus customers.

Over 3.7 million Medibank customers are also anxiously waiting to discover the extent of a cyber attack on Thursday.

Personal details, including passport and driver’s licence numbers, email and home addresses, dates of birth and telephone numbers, were exposed in the data breach at Optus, resulting in some needing new passports and driver’s licenses.

Lloyd Smith, a financial tech expert from ClearScore, warned hackers could use the dark web to sell the precious data.

A long line outside of the Elizabeth St Transport and Main Roads office, where a lot of the people were unfortunately victims in the Optus hacking incident. Photo: Matthew Poon.

Hackers can also use account passwords to access other private information and accounts, like social media, which can have disastrous results.

Mr Smith warned some Aussies caught up in the latest string of breaches could be in danger of severe financial loss.

“With more than two million customers having their identification documents and details exposed in the breach, only a small amount of these personal details are required for a thief to steal your identity and apply for credit (loans/credit cards) in your name,” he said.

Angeline Pan of Queensland was one of the many Optus customers that had her private information hacked. As a result, she had to arrange a new driver’s licence. Photo: Matthew Poon

“Your credit report is one of the quickest ways to see if someone is trying to commit identity fraud.

“This is because if someone is trying to take out credit in your name, a credit enquiry will appear on your credit report.”

But for those who believe their details have been accessed – something can be done.

Tools like ClearScore Protect, use dark web-monitoring tools to determine whether your passwords or other information have been stolen.

The identification details of 9.8 million customers of the Telecommunications operator Optus was stolen in one of the largest data breaches to occur in Australia. Photo: Brendon Thorne

Credit checks can uncover whether anyone has applied for credit cards using your details.

“(These options) should be on everyone’s mind. It’s super simple to check and monitor and could save you a lot of time and money in the future,” Mr Smith said.

“Unfortunately, this isn’t the first nor will it be the last time a data breach happens. As such, consumers must remain vigilant so they can stay ahead.”

About 41 per cent of breaches noted by the Office of the Australian Information Commissioner between July to Dec 21 were due to human error, whereas 37 per cent were due to cyber security incidents.

ClearScore Protect is a free dark web-monitoring tool that checks your security score and identifies if and where your data has been compromised.

What you should do if your data has been compromised?

• Use dark web-monitoring tools like ClearScore Protect to see if any of your passwords have been stolen, and how to take action if they have been.

• Change your password if you have used the same password across multiple websites.

• Activate two-factor authentication to add an extra layer of security to all your accounts, including your bank account, social media accounts and any other accounts with your personal or financial information.

• Use credit reporting services to discover if anyone has applied for credit cards using your details.

• Keep an eye on your bank statements to ensure no unauthorised payments go through.

• Ignore any mysterious texts or calls from unknown numbers asking for personal information or confirmation.

Have you been subject to a recent data breach? – get in touch: [e-mail]

Originally published as How to check if your identity has been stolen