DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Australian Telcom Giant, Telstra investigated over data breach

Posted on December 9, 2011 by Lee J

TELSTRA faces the wrath of the Federal Privacy Commissioner after leaving customer details of potentially millions of customers exposed on the web including, reportedly, usernames and passwords. The details were exposed in a search page used by Telstra customer service agents that was left unprotected and openly accessible on the web. The page entitled "Telstra Bundles request search" was reportedly discovered by a user of the community broadband forum Whirlpool. Telstra hastily tore down the site after it became aware of the breach late this afternoon but not before computer security experts showed that it could be used to access customer details including their account numbers, broadband packages, technician visits and, in some cases, their email’s usernames and passwords. Media reports suggested credit check details were also accessible but that was not confirmed by Telstra. Alarmingly, Telstra said it was unsure how many customers’ details were potentially breached. "(It’s) unsure at this stage, it appears to be limited to bundled customers but we don’t know how many," a Telstra spokeswoman said. In its 2011 annual report Telstra reported that it sold 659,000 new product bundles in the year to June 30, 2011. The privacy commissioner had been made aware of the breach and a full investigation and report into the lapse would be prepared as soon as possible. The spokeswoman said the carrier’s priority was to close the security hole. The company would also move as quickly as possible to notify customers of the breach and maintain transparency around reporting details of the incident. source

Related posts:

  • Telstra confirms customer data breach
  • Telstra internal website made public, releasing account details of up to one million customers
Category: Breach Incidents

Post navigation

← PA: Hackers Steal Washington Co. Customers’ Credit Card Info
Camden New Journal investigation on Camden Council’s website starts probe →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Texas Centers for Infectious Disease Associates Notifies Individuals of Data Breach in 2024
  • Battlefords Union Hospitals notifies patients of employee snooping in their records
  • Alert: Scattered Spider has added North American airline and transportation organizations to their target list
  • Northern Light Health patients affected by security incident at Compumedics; 10 healthcare entities affected
  • Privacy commissioner reviewing reported Ontario Health atHome data breach
  • CMS warns Medicare providers of fraud scheme
  • Ex-student charged with wave of cyber attacks on Sydney uni
  • Detaining Hackers Before the Crime? Tamil Nadu’s Supreme Court Approves Preventive Custody for Cyber Offenders
  • Potential Cyberattack Scrambles Columbia University Computer Systems
  • 222,000 customer records allegedly from Manhattan Parking Group leaked

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Germany Wants Apple, Google to Remove DeepSeek From Their App Stores
  • Supreme Court upholds Texas law requiring age verification on porn sites
  • Justices nix Medicaid ‘right’ to choose doctor, defunding Planned Parenthood in South Carolina
  • European Commission publishes its plan to enable more effective law enforcement access to data
  • Sacred Secrets: The Biblical Case for Privacy and Data Protection
  • Microsoft’s Departing Privacy Chief Calls for Regulator Outreach
  • Nestle USA Settles Suit Over Job-Application Medical Questions

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.