The cyberattack on Latitude Financial was worse than it first appeared and includes data from an unknown number of people who applied for Latitude products in Australia and New Zealand, the company said, sending its shares down 7 per cent.

The attack, first disclosed on March 16, was initially thought to have involved the theft of driver’s licence details of roughly 100,000 customers, plus 228,000 unidentified customer records.