Singtel unit Optus to defend proceedings by Australian authorities over 2022 cyber attack

SINGAPORE - Singtel’s Australian unit Optus Mobile has reiterated its intention to defend proceedings filed by the Australian Communications and Media Authority (Acma) over

a 2022 cyber attack faced by Optus.

On June 14, Optus said it was aware of only about 10,200 customers having their personal information published on the internet due to the cyber attack.

This is opposed to Acma’s claim alleging 3.6 million breaches of the Australian Telecommunications (Interception and Access) Act.

Optus said that at this stage, it was unable to determine the quantum of penalties, if any, that could arise from the Australian media watchdog’s proceedings.

“That is ultimately a matter for the Federal Court to determine,” said the Australian carrier.

“If a contravention is found, the court will consider a number of factors and apply a penalty amount it determines overall as appropriate based on the events that occurred. It is not necessarily a direct calculation based on the number of contraventions.”

Optus added that it has taken “significant steps”, including working with the police and other authorities, to mitigate potential harm to its customers affected by the 2022 cyber attack.

The telco previously announced on May 22 that Acma had filed proceedings relating to the cyber attack on the basis that Optus had failed to protect the confidentiality of personally identifiable information of its customers from unauthorised interference, or unauthorised access. Optus said it intended to defend these proceedings.

Earlier in March, the Singtel unit was fined A$1.5 million (S$1.3 million) by Acma for breaching public safety rules after it failed to upload data via its outsourced supplier, Prvidr, to the Integrated Public Number Database.

Shares of Singtel were trading one cent, or 0.4 per cent, higher at $2.57 on a cum-dividend basis as at 9.27am on June 14, after the news.

THE BUSINESS TIMES