Data Breaches

230k Individuals Impacted by Data Breach at Australian Telco Tangerine

Tangerine Telecom says attackers stole the personal information of 230,000 individuals from a legacy customer database.

Tangerine Telecom says attackers stole the personal information of 230,000 individuals from a legacy customer database.

Australian telecommunications provider Tangerine this week announced that the personal information of 230,000 individuals was stolen in a recent cyberattack.

The incident occurred on February 18 but was not discovered until two days later. The attackers, Tangerine said, accessed a legacy customer database containing the information of roughly 230,000 current and former customer accounts.

The compromised personal information includes names, addresses, dates of birth, email addresses, mobile phone numbers, and Tangerine account numbers.

“We can confirm that no credit or debit card numbers have been compromised, as we do not store this information. No driver’s license numbers, ID documentation details, banking details or passwords have been disclosed as a result of this incident,” the company said in an incident notification.

According to Tangerine, the attackers appear to have accessed the database using the login credentials of a contractor.

To contain the incident, the telecommunications services provider revoked network and system access for the compromised account, removed access to the database, and “changed all other team usernames and passwords”.

The incident, the company said, did not impact its services, nor customer accounts, which are protected with multi-factor authentication (MFA).

Tangerine started notifying the impacted individuals on February 21, encouraging them to stay vigilant on scams and other cyber issues and to report any incident.

Advertisement. Scroll to continue reading.

“No one is more disappointed than me. Anything that negatively impacts our loyal customer base hurts, and we sincerely apologize to them for this incident,” Tangerine CEO Andrew Branson said.

“Thankfully, over recent years we’ve taken multiple preemptive steps which have included reviewing what data we really need to keep and what we can live without. Moving forward, we are fully committed to learning from this incident and implementing necessary improvements to prevent similar occurrences in the future,” Branson added.

Founded in 2014 and headquartered in South Melbourne, Tangerine offers NBN and mobile services across Australia.

Related: Prudential Financial Discloses Data Breach

Related: Bank of America Customer Data Stolen in Data Breach

Related: 1.5 Million Affected by Data Breach at Insurance Broker Keenan & Associates

Related Content

Ransomware

Philadelphia-based real estate company Brandywine Realty Trust shuts down systems following a ransomware attack.

Data Breaches

University System of Georgia says Social Security numbers and bank account numbers were compromised in the May 2023 MOVEit hack.

Data Breaches

Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords. 

Data Breaches

Financial Business and Consumer Solutions (FBCS) says compromised information may include names, dates of birth, Social Security numbers, and account information.

Data Breaches

UnitedHealth confirms that personal and health information was stolen in a ransomware attack that could cost the company up to $1.6 billion.

Data Breaches

The LockBit ransomware gang leaks data allegedly stolen from government contractor Tyler Technologies.

Ransomware

United Nations Development Programme (UNDP) investigating a ransomware attack in which hackers stole sensitive data.

Data Breaches

Cherry Health says the personal information of over 180,000 individuals was stolen in a ransomware attack.

Copyright © 2024 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version