At a glance
If a data breach has exposed personal information, act quickly to reduce the risk of harm.
Find out what information is exposed and be aware of scams. You should secure your accounts, devices and identity. Continue to check for unusual activity across your accounts. Data breaches can lead to further cybercrimes, such as identity theft and scams. If you experience money loss or identity theft, you can report it to us.
Emergency help: If there is an immediate threat to life or risk of harm, call 000.
Data breaches explained
A data breach occurs when sensitive or personal information is accessed, disclosed or shared by people who aren’t allowed to access it.
When personal information is exposed, the effects can be serious. Cybercriminals may use the information to access online services, such as your bank accounts, or commit identity theft.
Learn more about data breaches.
Signs you may be affected
You may be impacted by a data breach if you:
- get contacted by an organisation telling you there has been a data breach
- notice suspicious attempts to log in to your accounts or misuse your personal information
- receive more spam calls, emails or messages from people you don’t know
- read news or online posts about a data breach involving a company you use
- find your information on breach-checking tools like Have I been Pwned.
If this is happening now
You can reduce harm by taking immediate action.
Find out what information was exposed
If you’ve been notified about a data breach, find out what information was exposed.
Review the breach notification carefully and follow any instructions from the organisation.
You can ask for details about:
- what information was compromised
- when the breach occurred
- what steps they are taking to protect affected people
- what actions you should take to reduce your risk.
Check their website for announcements, FAQs and breach updates. Follow any guidance or support services they provide.
Watch out for scams
Cybercriminals often use information exposed in data breaches to target you with scams.
Be cautious of unexpected messages and check they are genuine before taking action. Scammers may give or use fake phone numbers, email addresses and websites.
Before responding or interacting with a message:
- confirm the message is legitimate by checking the organisation's official website
- contact the provider using contact details listed on their website
- avoid clicking links or opening attachments in emails or messages.
If you’re told to change your password, only log in through the organisation's official website or app. You can also turn on multi-factor authentication where available.
Be cautious of messages that:
- create a sense of urgency or panic
- ask for passwords, verification codes or personal information
- contain spelling mistakes or unusual sender addresses
- request immediate payment or account verification.
Secure your accounts
It’s important to update and secure your accounts after a data breach.
Change your password
When changing your password, use the organisation’s official website or app. Use a strong, unique password that isn’t used on any other account. This includes other accounts that might have the same password.
Learn how to create strong passwords and a use password manager.
Review your account security settings
Check for any unfamiliar devices, login activity or transactions you don’t recognise. Sign out of devices that are unfamiliar.
It’s important to update your recovery email addresses and phone numbers. Update other account security information if necessary.
Enable additional security features
For extra protection, turn on multi-factor authentication (MFA) where available. Passkeys are one of the most secure forms of MFA and also provide a more secure way to log in to your online accounts than using a password.
Review your account alerts and notification settings to be notified of suspicious activity.
Monitor your accounts
Continue to check your accounts for signs of account compromise. Report any suspicious activity to the service provider immediately.
Secure your finances
If your personal or financial information was exposed in a data breach, your money and accounts may be at risk. Take these steps immediately.
Contact your bank or financial institution
Tell them your information may have been compromised. Follow their advice to secure your accounts and ask if you should freeze your accounts or replace your cards.
It’s important to check your accounts for unauthorised transactions. If you find anything suspicious, report it immediately.
If you’re unhappy with their response, you can get free help from the Australian Financial Complaints Authority.
Be aware of recovery scams
If you’ve lost money, be cautious of anyone offering to recover your funds for a fee.
Scammers often target victims by promising to help recover lost money, only to steal more.
Learn more about money recovery scams.
What to do next
Take these extra steps to reduce the impact of a data breach.
Secure your identity
If your personal information was exposed in a data breach, you may be at risk of identity theft. If this occurs, you should secure your information and report the incident.
Find out how to recover from identity theft.
Check for suspicious activity
Monitor your accounts and personal information regularly. If you can find misuse early, you can reduce the harm to your information.
Check for signs of unauthorised activity, including:
- social media posts made in your name
- messages, emails or texts sent from your accounts that you didn’t send
- purchases or transactions you didn’t authorise
- new direct debits or automatic payments you didn’t set up
- changes to your banking, contact or account details you didn’t make.
If you find anything suspicious, report it to us.
Learn about your rights and next steps
For guidance on responding to data breaches, visit the Office of the Australian Information Commissioner. This includes breaches involving Consumer Data Right data and other personal information.
How to get help and report
It’s important to report the incident to the appropriate authorities.
It’s considered a cybercrime if:
- you’ve lost money
- your identity is stolen
- your account is compromised.
You can report a cybercrime to us.
We will send your report to the police for review. While they may not be able to respond to every report, the information you provide helps support investigations.
If your business is involved
If your business is involved a data breach, you may have reporting and legal obligations. You must report the data breach to the Office of the Australian Information Commissioner (OAIC). This is mandatory through the Notifiable Data Breaches Scheme.
The OAIC also provides details on data breach preparation and response.
If you want to talk to someone, call our hotline on 1300 CYBER1 (1300 292 371). We’re available 24 hours a day, 7 days a week.
Stay protected
Learn more about how to stay protected through our personal cyber security handbook.