Data Breaches

Serious damage can occur when your information winds up in the wrong hands because of a data breach, but there are steps you can take to protect yourself. 

This page has information about what to do if your information has been exposed in a data breach.

Download PDF

What to do if your data has been breached

01

If you have received a direct notice of a data breach from an affected organisation, it should tell you if your data was stolen and what information of yours was taken.  To find out more about the data breach, contact the affected organisation directly. 

The affected organisation is responsible for providing you, as their customer, with important information, advice and support that meets your needs.

02

Look out for scams

Scammers may try to use the data breach to target youFollow the tips on how to protect yourself from scams on this page to help keep you safe.

03

Secure your bank accounts

Tell all your banks or credit providers that you’ve been a victim of a data breach and work with them to put measures in place to protect your finances. 

These measures could include setting transaction limits, enabling multi-factor authentication, additional security questions, and using other forms of ID to verify your identity. 

04

Place a ban on your credit files

You can apply to the three credit reporting agencies in Australia for a ban to be placed on your credit filesThis will stop people fraudulently getting credit or loans in your nameThis is a free serviceSee the IDCARE credit ban factsheet or go to our page on Credit Reports for more information.

05

Contact your super fund

Criminals may try to use the data breach to take money from your super fund without permission. 

Tell your super fund you’ve been a victim of a data breach and work with them to put measures in place to protect your money (e.g. an alert to be placed on your account, additional security question, placing a hold on any activity). 

06

Check if you need to replace your driver’s licence

Most states and territories will allow you to replace either or both your driver’s licence number and card number.  Changing either of these will make it harder for criminals to take out loans in your name. 

For more information about whether you need to replace your driver’s licence, contact your state or territory road transport authority.

07

Check if you need to replace your passport

If your passport has been exposed in a data breach it will usually be blocked through the Document Verification Service and you won’t be able to use it for online verification.  

For more information about whether you can or need to replace your passport, contact the Australian passport office.

08

Check if you need to replace your Medicare card

Many people use their Medicare card details as a source of identification. If your Medicare number has been exposed in a data breach, you can get a new card and number for free.

For more information, contact Services Australia.

09

Contact your telecommunications and internet providers and other online services

Contact your telco and internet providers, tell them about the data breach and request additional security on your accounts. 

If you have online services accounts (like buy now pay later, Uber, eBay, and other online accounts) be sure to place extra security on these.  Criminals often use these accounts to make fraudulent purchases.

10

Change your passwords

Change your online banking and email account passwords, using different passwords for each account.  The stronger the password, the better the security it will provide for your accounts.

For more information, see the Australian Cyber Security Centre.

11

Change the email address you use for important accounts

Your email address may now be in the hands of a criminal.  If possible, you may want to stop using that email account for important things (e.g. bank accounts, telco accounts, Apple ID or Google recovery email, MyGov account or other government services). 

12

Contact IDCARE for more help

IDCARE is Australia and New Zealand’s national identity and cyber support service. They provide a free and confidential support service for those impacted by scams, data breaches and identity theft.  You can contact IDCARE on 1800 595 160.