The Optus Breach: If I Could Turn Back Time

The report summarizes the Sep 2022 Optus breach where a threat actor accessed and advertised the personal data of millions of customers and attempted to extort Optus for USD 1 million; the actor subsequently withdrew the data from sale and apologized. It contextualizes this behavior by reviewing similar cases where malicious actors publicly renounced or halted activities—usually due to fear of law enforcement—while noting that such instances are rare and often motivated by self-preservation rather than genuine remorse.