Enforcement/oaicCWLTH

OAIC investigation — Optus 2022 data breach

civil penalty20 Mar 2025

Respondent

Singtel Optus Pty Ltd

Facts

September 2022 Optus breach exposed ~10M customer records. OAIC alleges APP 11 failures + delayed notification.

Outcome

Civil penalty proceedings underway — major test case under post-2022 penalty regime.

Read the source

https://oaic.gov.au/news/media-centre/

Rules Mate links to the regulator's own publication. We do not republish full decision text. Always verify the latest status against the source before acting.