TPG Telecom has reported a cyber incident involving its iiNet subsidiary that exposed personal data of around 280,000 customers, making it one of Australia’s most significant breaches this year. The breach occurred on August 16 when attackers used stolen credentials from a single employee to access iiNet’s order management system.
The compromised data includes email addresses, landline numbers, usernames, residential addresses, contact details, and roughly 1,700 modem setup passwords. No identity documents or financial data were affected.
TPG, Australia’s second-largest telecom provider, said the breach was limited to iiNet systems. iiNet has since blocked unauthorized access and is working with national cybersecurity agencies. Affected customers are being notified and advised to stay alert for phishing attempts and scams.
The incident adds to growing concerns in the telecom sector, following past breaches like the 2022 Optus attack. TPG emphasized the need for stronger access controls and multi-factor authentication to prevent future compromises.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
