• expired

[VIC] Free New VIC Drivers Licence for Optus Data Breach Customers @ VicRoads

5230

The website has been updated with the following information.

A dedicated form has been created for concerned customers to request to have their Victorian driver licence record flagged and protected on the Victorian and national licence databases and the Australian Government's document verification service. 

You can access the secure form here (External link).


Any Optus customer who is concerned about their licence information is recommended to contact VicRoads via the dedicated channels above to request to have their details flagged.

The Department of Transport and VicRoads are also committed to supporting impacted individuals who wish to have their licence replaced. This request will be validated against the Optus information once available. 

Further information on licence replacements is expected shortly. In the interim, please do not use the usual replacement licence services.

Victims of the attack can refer to the advice of experts including:

Victorian Government organisations impacted by a cyber incident must report it to the Victorian Government Cyber Incident Response Service.

Mod note: The start time for a free Driver's License replacement offer is yet to be determined, and according to the site, "The Department of Transport and VicRoads are currently working through a process to support an anticipated high-volume of requests.".

Do not request a license replacement until further announcements are made.

Optus media release updates on the cyberattack

See Also: Driver License replacements for other states.

QLD, SA, VIC, TAS, WA, NSW, NT

Related Stores

VicRoads
VicRoads
Optus
Optus

closed Comments

        • They’re changing just the number and keeping everything else the same.

        • +2

          No its a new ID number buy same expiry

  • -4

    So how do I know I'm getting a new/different licence number and not just a replacement of my existing?

    • +20

      By looking at the numbers

    • +1

      The VicRoads site doesn't say it's a new number but news reports suggest it's a new license number. There's also the card number which is tiny text behind the card, I don't recall ever being asked for it but that will also change with a new card.

    • Because of they don't provide a new number it defeats the purpose of the exercise.

      • +1

        100% agree, but last time I replaced my driver's licence online, they literally sent out the same thing.

        I went through clicking the Vic roads options last night and there's no 'flagging ' section or anyway I can see that would let them know it's to get a new number, hence why I asked. How do they know what I actually want. I'm assuming a phone call would be the only way so far.

        Is their page helpful? No

  • +2

    the vicroad link doesn't actually say "free" replacement?

    • -2

      Yes, comprehension skills are like 'common sense' these days.

      Edit: The VicRoads page was edited after I wrote the above at per freefall101 below.

    • The Victorian Government will be supporting confirmed impacted customers with a free replacement licence card.

      Further information on licence replacements because of the Optus breach is expected shortly. In the interim, please do not use the usual replacement licence services.

      It also explains that impacted customers are anyone Optus contacts. So while it’s not free yet, it will be.

  • +2

    Email from OPTUS

    No ID document numbers or details have been affected.

    • +1

      I got that email too. Does that mean I don't qualify for this

      • +1

        “Anyone who has been notified by Optus that their licence details have been involved in the breach can contact VicRoads from Wednesday 28 September to have their Victorian driver licence record flagged.”

      • Yes, but what if I need to change my name and dob.

        • It's aul good man

      • +2

        My email said this.

        Importantly, no financial information or passwords have been accessed. The information which has been exposed is your name, date of birth, email, phone number, address associated with your account, and the numbers of the ID documents you provided such as drivers licence number or passport number. No copies of photo IDs have been affected.

        Drivers license and passport numbers exposed

        • It looks like ex customers 2-3+ years didn’t have ID #s on file still (only legally required to be kept for 2 years after account closure) or they didn’t get ID# for all customers they got DOB/email/addresses for.

          • @[Deactivated]: I was with them for 1 month in early 2019.

            Vivid wireless transferred to optus, after which i cancelled service.

            My details were still on file.

            • @lysp: Details or ID#? It looks like they have details (Name/Email/DOB/Address) for all customers probably ever, not sure if they kept ID # much longer than required from what I've heard. Though that will be hard to tell because there's various reasons they could be required to keep ID for much longer (and nothing really firm that stops them keeping it forever).

              • @[Deactivated]: This is a segment from the reponse:

                "contact": {
                    "email": "[email protected]",
                    "dateOfBirth": 123456700000,
                    "emailStatus": "Verified",
                    "contactId": "12345678",
                    "phone": "0412345678",
                    "lastName": "MyLastName",
                    "firstName": "MyFirstName",
                    "indentType": "Alternate Primary ID's",
                    "gender": "M",
                    "indentValue": "VW_CHECK_123456_[mylicencenum]"
                },
                

                So June 2019 -> Sept 2022 = 3 years, 4 months - give or take a few months

                • @lysp: And did Optus tell you, your license # was compromised? Interested on if the API is actually relevant or just something someone found with a different dataset. Suggests that only some customers had their details accessed via a similar API and a greater subset had less details accessed.

                  • @[Deactivated]: Actually just rechecked the data.

                    There were two different api calls mentioned on whirlpool, both returning slightly different data structures.

                    The second one is in the format below:

                    "personIdentificationDetails": [{
                        "documentNumber": "VW_CHECK_123456_123456789",
                        "documentType": "Alternate Primary ID's",
                        "jurisdictionType": "Not Specified",
                        "personId": "1234567",
                        "issuingJurisdictionName": "Not Specified",
                        "validityEnd": -1234560800000,
                        "validityStart": 0,
                        "isPrincipal": "1",
                        "isDefault": true
                    }
                    

                    This matches exactly with the data leak for a customer with the same type of ID. Same field names, similar values.

                    Based on this, I'm 99.9% satisifed that my license data would have been exposed in the 10m dataset.

                    And the email was pretty generic, although does mention ID information.

                    It is with great disappointment I’m writing to let you know that Optus has been a victim of a cyberattack. As a former Optus customer this has resulted in the disclosure of some of your personal information.

                    Importantly, no financial information or passwords have been accessed. The information which has been exposed is your name, date of birth, email, phone number, address associated with your former account, and the numbers of the ID documents you provided such as drivers licence number or passport number. No copies of photo IDs have been affected.

                    • @lysp: Well it matches what they told me too, no ID compromised, none in either of the API requests (ex customer > 3ish years ago). So it does look likely that the APIs do match. Though I wouldn't be 100% sure it's the same dataset.

                    • @lysp: Mine has "documentNumber":"My DOB", "documentType":"Proof Of Age", "jurisdictionType":"NT"

                      I don't know what this means, also the expiry date matches no document that I know of.
                      Luckily, my DOB is one digit off!
                      I don't remember what document(s) I used - it was a long time ago. If only I could go back and check…

                      • @McFly:

                        "documentType":"Proof Of Age"

                        Probably an evidence of age card, or less likely Birth Certificate, issued in the NT?

                        If it's a day off might have been manually entered at a store or some such?

                        • @[Deactivated]: Yes I thought maybe birth certificate, but it's unlikely I used that, and expiry 2019?
                          Also I have nothing at all to do with Northern Territory, never even been there!

                          • @McFly: 'NT' Could be some wierdo DB admin's version of Not Applicable, or some one who meant to data enter N/A but instead entered NT.

                            • @[Deactivated]: Not There!

                            • +1

                              @[Deactivated]: You were on the right track! Got this a few hours ago:

                              The information exposed does not meet the format of a proper Evidence of Age Card number (for example, too many or too few numbers were included)….
                              For more information, please check the online guidance from the NT Government’s official website or Evidence of Age Card issuing office.

                              Someone there screwed up my data entry at the time - fortunately!

    • +1

      Yet…

    • +1

      My friend got that one, mine said my driver's license or passport number was affected. Guess you don't have to worry.

  • +3

    There is no information on how you prove to VICROADS your eligibility for the free licence replacement other than the email received from the Optus CEO. Anyone can easily clone that email, no?

    As a long time former customer I don't have access to the Optus customer portal. So, I have no idea what ID I gave them at the time.

    • It’s possible Optus will share that data with VICROADS if they are legally allowed to.

    • +1

      “We are working very closely with Optus’s supporting partner IDCARE to get the full list of Victorian driver licences that have been exposed by the breach.”

  • +1

    Email from optus

    Dear user,

    It is with great disappointment I'm writing to let you know that Optus has been a victim of a cyberattack that has resulted in the disclosure of some of your personal information.

    Importantly, no financial information or passwords have been accessed. The information which has been exposed is your name, date of birth, email, and the number of the ID document you provided such as drivers licence or passport number. No copies of photo IDs have been affected.

    • Need to check which I'd was used. I believe it was licence.
      I'll try get a new Id number

  • +4

    Hmm offer seems to be targeted

  • +9

    my wallet was stolen a while ago and VicRoads wouldn't give me a new license number despite me having confirmation they made accounts using my license number. thanks optus :)

    • Did they decline as you didn't provide a police report /stat Dec etc?

  • -1

    Targeted. Only for those who live in Vic and also only for those that using Optus.

    • Or have used Optus in the last couple of years.

    • +1

      You mean those notified by Optus, because former or current customers that were notified.

      • They're still in the process of notifying more people.

        • If they're to be believed, they did the people with the ID# leaks first and they're onto people that have just had other personal details breached.

  • -2

    Optus should offer extra data for affected customers

    • +2

      Yes, I demand double the data: unlimited*2

  • +2

    Can anyone tell me what shortcomings this may cause if I get a new number?

    • +4

      Yes, you have to change your name as well.
      Henceforth you will be known as Da Big Thee Lezzzz X.

    • -2

      Shouldn’t be any really. Keeping the same number is for the government’s benefit.

      • +1

        I don't know why you're getting down voted.. I don't see any impacts honestly

  • -1

    Replacement fee is currently $25.40.

  • OMG gents i need help asap
    So i’m a QLDer who’s just moved to Melbourne less than a week ago and i got the data breach email from optus so i’m eligible for a license replacement under queensland govt.

    Am i eligible to get a victorian license instead free of charge as I have to switch my license over to a victorian one anyway.

    Or do i go the hassle route and get new qld license and then switch that for a victorian one. Also would that be free of charge or do i have to pay? i’ve literally just renewed my qld license last year for 5 years…

    Thanks gents xx

    • +1

      Do you get a different number when transferring your license across from QLD to Vic? This is OzBargaining to the finest if so.

      • The numbers aren't transferrable between states so yes.

    • -2

      Am i eligible to get a victorian license instead free of charge as I have to switch my license over to a victorian one anyway.

      Of course! In fact your free licence will be delivered to you on a silver platter by a skydiving chimpanzee on roller skates.

    • +1

      Vicroads doesn't charge you to change your licence to a Victorian one when you live from interstate. They just gave me a Vic one with the same expiry date as my SA one when I moved here a few years ago.

    • +1

      You will get a new Victorian licence and they will confiscate your Qld one at the service centre. Your Vic licence will have the same expiry as your Qld one and you will obviously have a new number. The appointment fee is about $20.

      The relevant info is on this page.

      It's entirely up to you if you want to get a replacement Qld one first; it won't affect your new Vic licence. I guess in your case it'll depend when you last gave your details to Optus? If you recently renewed, you would have a new expiry date although the number would probably remain the same (don't quote me on this). I am unsure if Qld invalidates your licence immediately once switching states. For peace of mind, you might want to do the replacement anyway, and then change over.

      • It's a mess - I still had a valid SA and Vic licence until my SA licence expired (and, I guess, I could pay Service SA to renew my SA licence if I wanted to - it still shows up in my My SA Gov app, albeit as expired). I'd be surprised if there's any serious communication between the various States' departments of transport to coordinate this kind of thing.

  • +2

    Demerit points too? Asking for a friend haha

  • Honestly though, what can one do with just your lic number? Am curious that's all

    • +2

      Open new bank accounts and credit cards.

      • Incorrect. They also need expiry date.

        • +3

          In the case of Optus breach, the expiry date was also leaked.

          • @meong: Yes, though in plenty of cases, including mine, the expiry date they had was incorrect.

      • +1

        Bank acc I get it.. But cc would be terribly hard with credit check, salary proof etc anyway

    • +1

      Use it to get another sim card and do fraudulent calls..
      Use it for identity theft..
      Get a car on your ID in cash and break laws..

      • You can also open up an online wagering account and use it to launder money

  • +4

    When do we get free new passports?

    • -5

      The formula for that is: Tnp = Tpq * Bs * Dgaf

      Where
      Tnp is the time a new passport is received,
      Tpq is current new passport wait time,
      Bs is Bureaucratic red tape amount,
      and Dgaf is government willingness

      If you don't want to do the maths, the answer for most people will be: Thfo

      Where
      Thfo is the time when hell freezes over.

      • +12

        When you have to go to these "lengths" to explain your joke it's probably time for bed

        • -7

          I haven't explained anything. People will either get it or they won't, they will either agree or they won't. It's all good.

      • I mean, I get the joke, ….regardless

  • +2

    If I were Telstra, I would offer Every optus customers to continue their remaining contract/prepaid free of charge if they were to ditch optus and come over to Telstra now! Bye-Bye Oopstipus!

    • Probably why they haven't is that it easily could have been them, no point goating about it

    • Well Optus is cheaper than Telstra.. So Telstra will have to give discounts to their existing customers and future customers..

  • LEGAL Class Action / Class action is a type of legal proceeding in which one person (the plaintiff or applicant) brings a claim on behalf of a wider group of people

    Time and car expense to get to Transport office / wasted time in line/ return trip / license fee = approx $200 per customer credited on Optus bill

    Easy for them and for victim Lemon to Lemonade

    This way they will pay professionals to keep data secure and not skimp on security

    • +1

      You’ve also got a buttload of people who are no longer with Optus affected too, a bill credit wouldn’t do a lot for them if that’s what it came to

  • +1

    Why should the tax payers have to chip in! Get rid of all the IT people working for Optus.

    • Who said this is taxpayer funded? Vic Roads will invoice Optus for the replacement licences.

      • and Optus will pay it from their insurance..

      • +1

        Can u send me the invoice to support your theory? You realise how much its going to cost dont you?

        • Can u send me the invoice to support your theory?

          It's been on the news, so perhaps you're not all caught up. Optus to pay for licence replacements

          Australians caught up in a massive breach of Optus data will be able to change their driver's licence numbers and get new cards, with the telco expected to bear the multi-million cost of changeover.

          You realise how much its going to cost dont you?

          Which is exactly why businesses have different kinds of insurances.

  • +3

    Fxxk Optus for causing unnecessary headaches for so many people

    • +1

      Yeah, heaps of people on Reddit are paying out their contracts and going to a different provider. I’ll be doing the same. Optus security is a shambles.

      • I have one month optus contract left I am not willing to pay them anymore fuk them

      • +2

        A bit late for that and there is no reason another provider cannot have the same thing occur

  • Where is NSW?

    • +21

      A little bit north of Victoria

  • I sincerely hope that all of this is funded by the Optus - and more specifically, from the bonuses and salaries of the (profanity) board.

    • +2

      Oh but it’s not their fault, they’re the victim here! 🙄

      • -2

        We found the Optus CEO bargain account guyz

      • And I have no idea why I have an associated tag next to my username???

      • Why not their fault? They allowed hackers to access their system without authentication (API).

        • I was being sarcastic, but it mustn’t have come through that clearly. 😄

          An openly available API that has access to sensitive PII is pretty close to the worst possible thing Optus could have done.

          • @GeneralSkunk: Agree, how did that not even get picked up earlier is horrifying.

  • +2

    This was an eyeopener to stop using passports for id verification where ever possible. I'd imagine there's not much that could be done if passport numbers were stolen.

  • +1

    The hackers still have everyone's DOB, full name and address and those are the things that cannot be changed!

    I'm going to sue optus

  • +5

    The way the average Melbourne person drives, I already thought they gave out their licenses for free, in breakfast cereal boxes.

    • +1

      I knew without even looking at your profile that you were from SA 😂

Login or Join to leave a comment