NewsBite

Optus hack: What NSW customers should do about driver’s licence

NSW Optus customers entangled in the telco’s data hack have received confusing text messages about replacing their driver’s licence. Find out what you need to do next here.

Optus announces external review into hacking

NSW customers whose personal details were compromised in Optus’s recent data hack have been given an important detail about whether or not they need to apply for a driver’s licence replacement.

On Monday, the telco giant revealed that 2.1m customers have had their identification documents meddled with by hackers, including 1.2m ID numbers currently operating.

Thousands of affected users with the telco giant were sent a ‘Cyberattack follow up’ message on Tuesday morning – providing an urgent update from the NSW Government.

“Further to our communications on Sunday, we wish to confirm that NSW uses a national Document Verification Service (DVS) that means both your driver’s licence numbers and card number are required to verify your identity,” it read.

“Therefore, NSW Gov (sic) advises you do not need to replace your Driver Licence.”

A major cyberattack on Optus caused the details of up to 9.8 million customers to be compromised. Picture: NCA Newswire/ Gaye Gerard
A major cyberattack on Optus caused the details of up to 9.8 million customers to be compromised. Picture: NCA Newswire/ Gaye Gerard

That message followed a confusing SMS on Sunday night which left many Optus users scratching their heads.

“Cyberattack update: Confirming only the licence number on your Driver Licence was exposed, not the card number,” the Sunday message read.

“Your State or Territory government will provide advice on any action that you may need to take via their website.”

The original message, sent on Sunday in the middle of a long weekend, left affected NSW customers unable to clarify whether or not they needed to order a new licence.

HOW TO KNOW IF YOU NEED A NEW LICENCE IN NSW

What is the national Document Verification Service (DVS) for NSW?

According to the Australian Government IDMatch website, the DVS “checks whether the biographic information on your identity document matches the original record”.

In NSW, three pieces of information – your licence number, card number and expiry date – are needed to verify you identity via this system.

A text message sent to Optus customers on Sunday October 2, 2022. Picture: Twitter
A text message sent to Optus customers on Sunday October 2, 2022. Picture: Twitter
Optus CEO Kelly Bayer Rosmarin addressed customers in a video. Source: Supplied.
Optus CEO Kelly Bayer Rosmarin addressed customers in a video. Source: Supplied.

What is the difference between licence and card number on NSW Driver Licence?

The two numbers of significance that feature on a NSW Driver Licence are the card number and the licence number.

The card number is the 10-digit figure that sits in the top right corner on the physical card and at the bottom of the digital licence.

The licence number is the eight-digit figure that sits to the left and in the middle of the driver’s licence under your name.

The hack has affected millions of Australians across the country. Picture: David Clark
The hack has affected millions of Australians across the country. Picture: David Clark

How do I know if my driver’s licence details have been exposed?

Optus is reaching out to affected customers via text message at large.

Customers who have specific concerns are urged to contact Optus via the My Optus App, which the company had said remains the safest way to interact with them, or to call them on 133 937.

Optus will not send links in any emails or SMS messages.


Should I get a new driver’s licence after receiving Optus’s message?

In NSW, you should apply to get a new driver’s licence if you receive a text from Optus informing you of both a leaked card number and licence number.

If only one of those numbers is leaked, such as the licence number, you do not need a replacement.

Prime Minister Anthony Albanese on the Optus Breach, October 1. Picture: Instagram
Prime Minister Anthony Albanese on the Optus Breach, October 1. Picture: Instagram

Where can I apply for a new driver’s licence?

After heeding advice from Optus, Service NSW is urging customers that meet the conditions outlined above to replace their driver’s licence online, or visit a nearby Service Centre or call 13 77 88.

Those applying for a replacement due to the hack will be hit with a $29 fee upfront, but reimbursements available through Optus either via an automatic credit to their customer account or via cheque, for former customers.

Even if you have not been contacted by the telco company directly, Service NSW is encouraging customers to remain vigilant for any suspicious activity.

Optus’s major hack caused the details of up to 9.8 million customers to be compromised. Picture: NCA Newswire/ Gaye Gerard
Optus’s major hack caused the details of up to 9.8 million customers to be compromised. Picture: NCA Newswire/ Gaye Gerard

If I am no longer an Optus customer, and they don't have my contact details, how will they contact me to say if I was affected by this hack?

If Optus does not have valid contact details for an impacted customer, this customer will be contacted via post using the last mailing address on file, as soon as possible.

Why would Optus keep previous customers' details for years after they have left?

When The Daily Telegraph posed this question to Optus, a spokesperson said it was a requirement.

“As a telco we are required to keep your personal data for a prescribed period – even after you cease to be a customer,” they said.

“We are very mindful of our legal requirements to retain and use your data appropriately.”

Add your comment to this story

To join the conversation, please Don't have an account? Register

Join the conversation, you are commenting as Logout

Original URL: https://www.dailytelegraph.com.au/news/nsw/optus-hack-what-nsw-customers-should-do-about-drivers-licence/news-story/4a1a6125c3e0a851cbf2c24a814fcdb5