Furious demand for Optus to pay for drivers licences and passports after cyberattack

The government has demanded the embattled telco foot the bill to replace a critical document a data breach left exposed.

Optus has been formally asked to pay for replacement passports for the millions of victims caught up in the telco’s data breach.

In a letter to Optus chief Kelly Bayer Rosmarin, Foreign Minister Penny Wong asked for confirmation it would cover the costs of new passports.

“There is no justification for these Australians – or for taxpayers more broadly on their behalf – to bear the cost of obtaining a new passport,” the Foreign Minister’s letter stated.

Prime Minister Anthony Albanese said the government expects Optus “to do everything within its means to support affected customers”.

Letter sent to Optus by Foreign Minister Penny Wong.

But he acknowledges the parliament must spring to action to overhaul its privacy laws in wake of the breach.

“Clearly, we need better national laws after a decade of inaction to manage the immense amount of data collected by companies about Australians, and clear consequences for when they do not manage (it),” he said.

A replacement passport would set an Australian back $193.

Earlier, Financial Services Minister Stephen Jones said Optus had to cover the cost for its own mistake.

Assistant Treasurer Stephen Jones said ‘Optus has done the wrong thing’. Picture: NCA NewsWire / Gary Ramage

It follows the call from Opposition frontbenchers James Paterson and Simon Birmingham for the government to foot the bill for any passport replacements.

“Australians whose passport numbers have been compromised are currently being told by the Department of Foreign Affairs and Trade on their website that ‘If you choose to replace your passport, you’ll have to pay’, and that, ‘we weren’t responsible for the data breach’,” they said.

Optus will provide NSW residents who have had their licence data breached with a $29 credit for a replacement. Picture: NCA NewsWire / Martin Ollman

“While Optus must take responsibility for what may be the largest data breach in Australian history, the Albanese Government has a responsibility to help Australians take steps to protect their personal information and security.”

Optus is currently working with state governments on providing replacement documents for those affected, and it will provide NSW customers with credit if they need to replace their drivers licence.

The federal government is ‘furious’ with the telco after it took five days to inform it that Medicare numbers were also accessed. Picture: NCA Newswire / Gaye Gerard

The federal government is also looking into providing some Australians with replacement Medicare numbers, with Health Minister Mark Butler saying the commonwealth was “furious” Optus had taken days to alert it about the issue.

“We were not notified that among passport details, drivers licence details and others that Medicare details had also been the subject of this breach,” he told ABC Radio.

“So we’re very concerned obviously about the loss of this data, and we’re working very hard to deal with the consequences of that.”

Optus customers affected by the recent cyberattack on the telecommunications giant have been given a pathway forward by various state governments if they have had their driver’s licence data breached.

Nearly 10 million Australians have had their data compromised in the cyberattack, with passport details, addresses and dates of birth also accessed by the hackers.

When we hand over copies of our driver's licence - we “over-share” personal information that could potentially compromise our security - see previous post ➡️ https://t.co/4SCWnOrWsg

Recently @Optus informed the Australian public of a major cyber-attack. pic.twitter.com/V4Ylf5UEsx

— Victor Dominello MP (@VictorDominello) September 26, 2022

The federal government is working with the Australian Federal Police and is now consulting with the FBI to determine the circumstances surrounding the attack.

WESTERN AUSTRALIA

WA is the latest state to confirm it will provide residents with a new licence number free of charge if they were impacted by the data breach.

Previously, WA was the only state which forced people to keep their licence numbers for life, regardless of whether they were accessed by scammers.

That will now change due to the cyber attack, WA Premier Mark McGowan said.

"People have lost their drivers licences and their identity through no fault of their own, so we'll provide a new drivers licence with a new number as soon as we can get the system up and operational,” he said.

NEW SOUTH WALES

The NSW government has issued instructions for customers to apply for a replacement drivers licence, with Customer Service Minister Victor Dominello confirming Optus will notify customers in coming days if their licence number was stolen in the hack.

To apply, residents with a digital drivers licence should head to the Service NSW app, where an interim card number, which can be used instead of a plastic licence card, will be instantaneously issued.

A new plastic licence card will then be issued and sent to the home of the resident within 10 business days.

Those applying for a new card will have to front the $29 replacement fee, but “reimbursement advice will be issued by Optus to customers in the coming days” according to Mr Dominello.

The Minister apologised on Twitter for taking “several days to reach this landing”.

“People are understandably stressed and need a pathway forward,” he said on Tuesday.

Nearly 10 million Australians have had their data compromised in the cyberattack on Optus. Picture: NCA NewsWire / Nicki Connolly

“Optus is conducting forensic analysis to understand the exact number of customers affected – and the type of information that has been compromised in each case,” Mr Dominello said.

He said the government had established “ID Support NSW” which people can call for help in replacing their identity documents.

Those who need support regarding the replacement of identity documents or advice on what preventive actions they can take are encouraged to contact ID Support on 1800 001 040.

Current and previous Optus customers have been warned of a heightened risk of scams and the federal government has urged Australians not to click on any suspicious links.

QUEENSLAND

Transport and Roads Queensland will issue replacement licences free of charge to its residents impacted by the hack.

“The licence is a highly secure ID document, but we’ve been hearing from a lot of people who are concerned, so we are giving people the opportunity to obtain a fresh licence,” Queensland Premier Annastacia Palaszczuk said on Twitter.

The decision was announced by the state’s Transport Department after an outcry from customers wanting to change their details to protect their identities.

The state has yet to detail exactly how residents can receive the new licence, but those concerned can call [phone] for help.

The federal government is working with the Australian Federal Police and is now consulting with the FBI to determine the circumstances surrounding the cyberattack on Optus. Picture: NCA NewsWire / Nicki Connolly

VICTORIA

Victorians affected by the Optus hack will be eligible for a new drivers licence at no cost.

The state government made the announcement on Tuesday evening and will expect Optus to reimburse the cost.

Those notified by Optus about their data being compromised in the breach can also contact VicRoads to have their licence record flagged.

“By flagging records, the Department of Transport will prevent any unauthorised changes or access to individual information through the Victorian licence database,” VicRoads said in a statement.

“It will not, however, prevent people using licence information in third party usages such as applying for bank accounts or any other circumstance which requires a drivers licences as a form of ID.”

More to come.

Originally published as Furious demand for Optus to pay for drivers licences and passports after cyberattack