Australia updates law to protect data after Optus hack

Electronic signage at an Optus telecommunications retail store is seen at the central business district of Sydney, Australia, Wednesday, Oct. 5, 2022. The government has announced changes to telecommunications law, Thursday, Oct. 6 to protect customers of Australia’s second-largest wireless carrier, Optus, whose personal details were stolen in a major cyberattack. Credit: AP Photo/Mark Baker

The Australian government announced changes Thursday to its telecommunications law to protect vulnerable customers after personal details were stolen in a major cyberattack on the nation’s second-largest wireless carrier.

The changes to Telecommunications Regulations allow Optus and other providers to better coordinate with financial institutions and governments to detect and mitigate the risk of cybersecurity incidents, fraud, scams and other malicious cyber activities, Treasurer Jim Chalmers and Communications Minister Michelle Rowland said in a joint statement.

“What this is all about is to try and reduce the impact of this data breach on Optus customers and to enable financial institutions to implement enhanced safeguards and monitoring,” Rowland told reporters.

More than one in three Australians had personal data stolen when Optus lost the records of 9.8 million current and former customers including passport, driver’s license and national health care identification numbers in a hack discovered on Sept. 21.

The hacker dumped the records of 10,000 of those customers on the dark web last week as part of an attempt to extort $1 million from Optus, a subsidiary of Singapore Telecommunications Ltd., also known as Singtel.

Optus ran full-page ads in Australian newspapers on Saturday under the headline: “We’re deeply sorry.”

Australia updates law to protect data after Optus hack
Customers walk out of an Optus telecommunications retail store in the central business district of Sydney, Australia, Wednesday, Oct. 5, 2022. The government has announced changes to telecommunications law, Thursday Oct. 6 to protect customers of Australia’s second-largest wireless carrier, Optus, whose personal details were stolen in a major cyberattack. Credit: AP Photo/Mark Baker

The ad included a link to an Optus website that details actions customers can take to avoid identity theft and fraud.

The government can change regulations without reference to the Parliament. But the government hopes to pass changes to the Privacy Act through the Parliament during its final four sitting weeks of 2022 in response to the Optus breach.

The changes would include increased penalties for companies with lax cybersecurity protections and curbs on the quantities and types of customer data that businesses can amass, as well as the duration for which personal information can be kept.


Police say hacker concealed ID in Australian privacy breach


© 2022 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed without permission.

Citation:
Australia updates law to protect data after Optus hack (2022, October 6)
retrieved 6 October 2022
from https://techxplore.com/news/2022-10-australia-law-optus-hack.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.

For all the latest Technology News Click Here 

 For the latest news and updates, follow us on Google News

Read original article here

Denial of responsibility! TechNewsBoy.com is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.