- Company
- Optus (Singtel Optus Pty Ltd and Optus Systems Pty Ltd)
- Regulator or court
- Office of the Australian Information Commissioner (OAIC)
- Law
- Privacy Act 1988 (Cth)
- Status
- Pending before the Federal Court; allegations not yet proven
What happened
The privacy regulator took Optus to the Federal Court over the September 2022 cyberattack that exposed personal information of about 9.5 million Australians. It alleges that for nearly three years Optus did not take reasonable steps to protect the data or properly manage its cyber risks given its size and the sensitivity of what it held. The regulator has run a similar case against Medibank since June 2024.
Sources
OAIC media releaseOAIC – civil penalty action against Medibank (June 2024)Summary in our own words. General information, not legal advice.