Optus data breach
We're aware of the recent Optus data breach and that people who have been affected might be concerned about their personal information.
We want to assure you that ATO systems have not been affected by the Optus data breach.
If you think you've been affected by the Optus data breachExternal Link, phone Optus Customer Service on 13 39 37.
Medibank cyber incident
We understand that the Medibank private cyber incidentExternal Link is stressful for those people affected.
If you think you may be affected by the recent Medibank private cyber incident:
- AHM customers can phone 13 42 46
- Medibank Private customers can phone 13 23 31
- visit the Medibank websiteExternal Link.
Information for affected customers
We're aware of the potential fraud and identity theft risks with taxpayers’ personal information being compromised.
Information for customers affected by large data breaches:
- Australian Cyber and Security Centre (ACSC) advice for people affected by the Optus data breachExternal Link
- ACSC quiz – Have you been hacked?External Link
- IDCARE Optus Data Breach Response Fact SheetExternal Link
- Home Affairs support for victims of identity crime – apply for a Commonwealth Victims' Certificate
- Scamwatch alerts on how to protect your information – Optus data breachExternal Link and Medibank Private data breachExternal Link.
The ATO takes data security seriously and we have several safeguards and systems in place to protect taxpayers.
Reminders for the community
It's important to always be vigilant for suspicious activity.
These tips can help protect your accounts and keep your personal information safe:
- Use multi-factor authentication for your accounts where possible.
- Be careful when clicking on links and providing personal information.
- Make sure your contact details are up to date when using online services.
Other websites that can help you protect yourself and stay informed:
- Moneysmart – Identity theftExternal Link
- Office of the Australian Information Commissioner (OAIC) – Identity fraudExternal Link
- ACSC – Report cybercrimeExternal Link
- Services Australia – Replacing a Medicare card because of a data breachExternal Link.
Complaints
If you would like to make a privacy complaint, contact OptusExternal Link or Medibank PrivateExternal Link. If you are unable to resolve your complaint directly, you can lodge a complaint with the Telecommunications Industry OmbudsmanExternal Link or the Office of the Australian Information CommissionerExternal Link.
Steps to make sure your personal information is safe if it has been lost or stolen in a data breach or cyber incident.