logo

How Did the Optus Data Breach Happen? | UpGuard

ID: 2be88d53-5881-5a1a-a16f-e0a72f3a273f

STIX ID: report--2be88d53-5881-5a1a-a16f-e0a72f3a273f

Feed Name: UpGuard Blog

Threat Score
88/100

Date Published: 2024-09-26

Date Updated: 2026-05-01

...
...

The report explains the Optus September 2022 data breach: an unauthenticated, publicly exposed API that served highly sensitive customer records (driver's license numbers, phone numbers, dates of birth, home addresses) was accessible for roughly three months; predictable, incrementing customer identifiers allowed attackers to enumerate and automate exfiltration, resulting in approximately 9.8 million customers being exposed.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.