Optus hack victims will be given a second driver’s licence number.

Optus hack victims will be given a second driver’s licence number.Credit:VicRoads

“We are fast-tracking protections for licence holders in response to the Optus data breach through the introduction of two-step verification and the free replacement of nearly 1 million licences.”

Loading

The two-step verification process requires both the new card number and also the original licence number for identity confirmation when applying for bank accounts,loan applications,phone contracts and real estate transactions.

The second card number would eventually become a feature of all new and replacement Victorian driver’s licences from early November 2022,not just those caught up in the hack, the department said.

Plans for the second number were already in place but were fast-tracked when Optus’ database was breached.

Advertisement

VicRoads has sent emails to some victims of the Optus breach informing them that they would soon receive a free redesigned driver’s licence card displaying the new number.

More than 942,000 Victorian licence holders had their details compromised,according to the Commonwealth Department of Home Affairs.

VicRoads had already flagged the records of more than 462,000 people who have registered their details online as possible victims,with about 342,000 of those confirmed as being affected directly by the Optus hack.

The remaining licence holders would soon be contacted,the department said.

It said it would continue to seek reimbursement from Optus for the cost of replacement of so many licences.

Cybersecurity experts have found almost all thestolen identity document numbers in the Optus hack are from driver’s licences,as opposed to other documents,based on a sample of 10,000 customers’ details the hacker released online in September.

The breach,impacting up to 9.8 million Optus customers,has potentially led to the theft of 3.6 million licence numbers,according to an unverified post published on a hacking forum last month.

Advice to Optus customers from the Department of Home Affairs

  • People can call the Australian Cyber Security Hotline on 1300 Cyber1 24 hours a day,seven days a week.
  • The ACSC’srecover and get help page has general advice on recovering from viruses,scams and cyber attacks.
  • IDCare is Australia and New Zealand’s national identity support service. IDCare offers personalised support to individuals who are concerned about their personal information. IDCare has aresponse sheet available online.
  • A privacy complaint can be made in writing to theOffice of the Australian Information Commissioner (OAIC) via email,mail or fax.

The Morning Edition newsletter is our guide to the day’s most important and interesting stories,analysis and insights.Sign up here.

Most Viewed in National

Loading