Telstra Corp Ltd (TLS.AX), the largest telecom company in Australia, announced on Tuesday that it had experienced what it called a minor data breach, two weeks after Optus, its main rival, was the victim of a significant hack. Three-quarters of Australia’s population, or 18.8 million customer accounts, belong to Telstra, which claimed that a third-party organization’s hack resulted in the exposure of some staff data going back to 2017.
According to local media, a Telstra internal staff email put the number of affected current and former employees at 30,000.
The data that was taken was “very basic in nature”, limited to names and email addresses, a company spokesperson said in a statement.
“We believe it’s been made available now in an attempt to profit from the Optus breach,” the spokesperson also said without elaborating.
Telstra did not comment on the number of people affected or when the breach occurred, but said it affected current and former staff only.
Australia’s telecommunications, financial and government sectors have been on high alert since Optus disclosed on Sept. 22 that a breach of its systems that may have compromised up to 10 million people’s accounts. The data exposed included home addresses, drivers’ licenses and passport numbers.
Optus owner Singapore Telecommunications Ltd (STEL.SI) has said it is assessing the potential cost of the attack, while law firms contemplate class action suits.
The Australian government, which believes the breach was due to a basic security gap, has continued to slam Optus for describing the attack as sophisticated and for delays in updating affected customers.
“Optus senior management are kidding themselves if they want a medal for the way that they’ve been communicating,” Government Services Minister Bill Shorten told reporters on Tuesday.
“Not even a crocodile’s going to swallow that.”
An Optus spokesperson declined to comment on Shorten’s remarks, but said the company was working as quickly as possible to provide accurate updates to impacted customers.
