All Breaches
Optus Data Breach
In September 2022, major Australian telecommunications provider Optus suffered a massive security breach via an unauthenticated customer identity API endpoint.
9.8 Million
Reported Records
8
Data Types
Critical
Severity
Oct 20, 2026
Last updated
Exposed Data Types
1 sensitive8- Medicare card numbers
- Customer names
- Dates of birth
- Phone numbers
- Email addresses
- Postal addresses
- Passport numbers
- Driver license numbers
About This Breach
The incident exposed sensitive personal information for approximately 9.8 million current and former customers, compromising passport numbers, driver licenses, Medicare details, and residential addresses.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information