2022 API misconfiguration — 11M customers

2022 11.0M records affected

Data compromised

Names, DOB, phone numbers, email, ID document numbers

Technical writeup

Australia's second-largest telecom. Current and former customer data accessed via API misconfiguration. Names, dates of birth, phone numbers, email addresses, ID document numbers. Driver's license and passport numbers for some.

Root cause

API misconfiguration; unauthorized access.

References

https://techcrunch.com/2022/09/22/optus-australia-data-breach/