• expired

[QLD] Free New Qld Drivers Licence for Optus Data Breach Customers @ Qld Transport

4140

If you've been notified by Optus (through email, text or account message) that your driver licence number has been exposed as part of the data breach, follow these steps:

  1. Bring the following documentation with you to a transport and motoring customer service centre:
    • your evidence of identity
      and
    • your Optus data breach communication for us to sight
      or
    • written notification from an enforcement authority such as Queensland Police Service.
  2. Your card/s will be replaced free of charge and you will receive them in the mail.

See Also: Driver License replacement schemes for other states.

QLD, SA, VIC, TAS, WA, NSW, NT

Related Stores

Queensland Government
Queensland Government
Optus
Optus

closed Comments

    • +1

      What if you've used an older email address that you no longer check or have since deleted because you've moved ISPs

      What like an Optus email address????
      I haven't gotten an email even though I've had multiple accounts (and.still have some prepaids). But I'm sure Daryl Maguire's ex-girlfriend will sort it out. Maybe they can appoint porkbellyaro as lead investigator. $500k should secure.him.

  • +1

    Ridiculous to require Optus proof. Many people haven’t gotten the email but are concerned they were included

    • +2

      If you aren't included then you don't need a new ID.

      If you haven't been told you were included then you weren't.

      • +2

        do you actually believe they have any idea of what was actually accessed / taken? I have zero faith, monday they tell me i wasnt part of it at all then tuesday i get a mail saying i was but no ID. zero faith in their ability to confirm accurately

        • It's easy to find a link to 10k person's detail. It's not on the dark web. it's the very first google result

          Rest assured that all info you've ever provided Optus is in the leak. The whirlpool link reveals it

          For some, it also includes Medicare number, company name, ABN, ACN, type, employee number, federal and state government email addresses.

          You don't need Optus or the media telling you lies about what's been leaked and where it's been leaked. The truth is out in the open

          • @p1723:

            It's easy to find a link to 10k person's detail. It's not on the dark web. it's the very first google result

            optusdata has taken their post down

            • +1

              @spaceflight: Other people in the forum had already downloaded and reposted the data, it's definitely out there if you're willing to find it. Though I would advise against it as downloading 10,200 personal records wouldn't be considered very legal.

              • @BeerCrisp: I kind of want to know whos on it..just to know whether i was one of the 10200 but i guess thats selfish thinking

                • @Rain Cloud: Yeah, and even if you weren't on it, doesn't mean you're safe as the data was still breached and probably in someone's hands. Doesn't matter what the hacker says :P

    • They have said they were sending emails of people affected by the ID # leak first and they’re already sending out emails to people that didn’t have ID #’s leaked, so people who haven’t got an email are likely fine or waiting on an email with just other identifying info only leaked.

      • Yeah I just got an email saying I was part of the leak but:

        No ID document numbers or details have been affected.

        Also I probably left Optus 7+ years ago.

  • +1

    I did not get any Optus emails about the breach but I was a customer only 2 years ago for more than 1 year. I am confused how to go about this.

    • +1

      Yeah it's just fantastic.

      I haven't been an Optus customer in over 4 years, but I apparently had an old account still live because those idiots wouldn't close it.

      Sad to say it's better to assume it's been compromised than to gamble it hasn't.

      Consider it like losing a wallet.

      • Doesn't matter if you had account open or not. They even address the email as 'former Optus customer'.
        They keep your details for 5 years. Even drivers licence, which is not needed past sign up at all!

        • They are legally required to keep your license for a minimum 2 years post account closure and for all active accounts. See the (Data retention bill 2015).

          I don’t know why people think it isn’t required post sign up, they can’t forget the only # that definitely uniquely identifies you and still know for sure who you are. You can make an argument for changing the law to make it not required, but just about everywhere you give ID to will keep it for a minimum of the time you’re a customer.

          • @[Deactivated]: You're right that the law requires it for existing customers. They do not ever require this data post sign up though.

            For mobiles, for eg., verification should be registered with the government so they can link SIM cards to ID (for a separate law that prevents burner phones). Verification is only required for registration and only the government would need to maintain the ID link as only they have the complete picture of number of SIM cards.

            I am a former (over 2 years ago) Optus mobile customer and my driver's licence was leaked. This data did not need to be held on to according to current laws. This data also never needs to be held on to practically.

  • Optus selling our data and called it “data breach”

  • +1

    “ If you've received a notification from Optus that your driver licence number has been used of suspected of being used for fraudulent activity, follow these steps.
    Can some explain
    Does that mean one can only apply if their DL have been used for fraudulent activity ?Do one have to wait for the fraudulent activity to occur ? Wtf ?

    • +1

      Until at least today proof it was used fraudulently was required to get a new license. I’m not sure if there’s been another media announcement contradicting that, but it looks like a rushed website edit to attempt (poorly) to say if Optus has told you it was leaked that is also a reason. But of course they haven’t worded it like that.

  • +3

    Am I wrong in reading that you have to go into a QLD Transport office to get this done? I'm surprised you can't just do it online.

    • -1

      I think they're trying to avoid processing ~4 million new drivers licence in Australia at once.

    • +1

      I suppose to do it online you’d just need to provide all the information the hacker already has so they could do it for you and get a physical copy too….

  • +2

    What about

    No financial information or passwords have been accessed. The information which has been exposed is a combination of your name, date of birth, email, phone number and/or address associated with your former account. No ID document numbers or details have been affected.

    • +2

      That means your drivers licence isn't affected.

      Here's what mine says, as a former customer: "The information which has been exposed is your name, date of birth, email associated with your former account, and the number of the ID document you provided such as drivers licence or passport number."

      • Mine says this:

        “ The information which has been exposed is your name, date of birth, email, phone number, address associated with your account, and the numbers of the ID documents you provided such as drivers licence number or passport number. No copies of photo IDs have been affected. ”

  • If you now have a new expiry date on your license than what Optus has on file would you still consider it compromised?

    • The number doesn’t change when it expires, so if they’ve told you your number has leaked, it’s leaked.

    • If the licence number is the same than yes.

  • How do they send the data breach notice? Does it come via email or SMS? And from whom? Thanks.

  • +1

    how come they dont make the NSW one as easy as this

    • +1

      Remember this in a few months when its time to vote

  • I just renewed my license! Absolute devo moneys been tight. Anways can I still get anything as im with optus?

    • +1

      They’re not extending people’s licenses, they’re giving ones with the same expiration date as the one that was leaked. No one will save any money here, they’ll just have to waste time getting a new license. If Optus hasn’t told you your license # was leaked then you aren’t eligible.

      • Would be more Secure if the exp date was different (kind of like a CVV). Hopefully they'd change your driver's licence number at least? Seems pointless otherwise, and recently just got a new 5y renew.

        Edit: looking at the TMR link they give you a new customer reference number. May as well but waste of an hour sitting in there

        • You can have multiple expiry dates on the one license so expiry date isn’t used as an identifier, it’s also pretty easily guessable since it’s from a very limited set and follows a pattern.

          If you’re a victim of fraud using your current number they do give you a different number.

          Ideally we wouldn’t have an unchanging number and we’d digitally have a new number to give out each time we needed to.

          • @[Deactivated]: Yeah same number be best if you've memorised it after years and years. A new one is still better if it means more secure after this event.

            It would be an administrative nightmare trying to allocate a new date, and people have only paid up to the exp date.

            Both of my licence classes are the same date, didn't get them on the same day.

  • When you renewed your DL, don't you get new DL number? I think it's like that in Canberra.

    • Not in QLD at least, the number stays the same as the day you first got a license in the state.

  • Do we need to proof have received it ? How it delivery to us ? Via email?

  • LEGAL Class Action / Class action is a type of legal proceeding in which one person (the plaintiff or applicant) brings a claim on behalf of a wider group of people

    Time and car expense to get to Transport office / wasted time in line/ return trip / license fee = approx $200 per customer credited on Optus bill

    Easy for them and for victim Lemon to Lemonade

    This way they will pay professionals to keep data secure and not skimp on security

    • +1

      $200 i think you are thinking too small :)

  • None for NSW?

  • In before
    - targeted deal
    - belongs to forums
    - what’s the normal price

  • Guys, I would recommend waiting for a few weeks before going to TMR so as not over burden the TMR employees. This is going to be a admin nightmare for them. I am going to wait for a few week as I don't have much to lose anyway.

    • Its always busy there anyway. It should be pretty fast to process compared to renewals that require a new photo and other services. The wait would probably be too long to bother anyway for a while.

      Aust post is isn't much difference with everyone wanting passports.

      • There is a lot going in the backend also. They will have to scrutinize every application before issuing it as identify thief may occur here too

        • No doubt. I'm just saying it's busy whenever you go, and not everyone will be going today anyway.
          Bloody Optus, haven't been with them for a while now.

    • +2

      Weeks, one third of Australia was compromised, so it's going to take years.

      The process is not scalable.

    • I went today and line was wrapping around the building. I immediately went grocery shopping instead. I drove by it 30mins later after grocery shopping and line was longer. I wait another time to do this if I can’t find another TMR that is less busy close to me.

      For reference I went 2 weeks ago to the same TMR to renew my license. It was a painful 30min wait but there was definitely not a line outside the building.

    • Last time I went to a TMR office they had two counters open while 7 staffers were picking through a giant box of number plates appearing to look for good combinations and putting them aside, while the place was jam packed with people.

      I’m quite sure there are no possible circumstances where TMR staff ever allow themselves to be overburdened.

  • -2

    The way the average Brisbane person drives, I already thought they gave out their licenses for free, in breakfast cereal boxes.

  • Do they take a new photo or do they just use the old one? Also do you keep using the old one until it arrives or do they give you a piece of paper or something?

    • shouldn't need a new photo I wouldn't have thought.
      i had to get one last time as the 5y option would have meant a photo over 10y old.

      Would really be easier to do this online, then again the hackers may be doing it on our behalf. You almost need to take another form of ID to DTMR.

    • Went in this morning, was told I would receive a call in a few days once the number has been changed and I would need to go back in for a new photo and signature.

      • Seems like the time frame for callbacks gets longer as the backlog grows.. went first thing yesterday morning and got a call back in a few hours (same day). Will see if the licence does really take 21 days to arrive or whether i'd have to follow up (as paper licence expires in 3 weeks)

        • I already got Equifax from a previous company, but good to delete all the sus SMS etc.. will take ages for a new id I reckon

  • May see what the line up is like today at lunch, haha

  • +3

    As much as I appreciate the government doing this for "free" and relatively quickly. The process is still broken.

    You have to go in to see them, wait for ages, have paper work etc. This is not scalable for millions of those Australians who have had their id compromised. Most people don't understand the importance of doing and can't afford to take work off to do it.

    Optus needs to provide the departments with the contact details of everyone who has had their id stolen and everyone should just get a new drivers licence without the mess around.

    Alternatively, Australians should just need to fill in a online form asking for a replacement license.

    I think less than 1% of those affected will take this offer up.

    • +1

      A relative got a different email saying their ID (ie d/l wasn't compromised, so no real action required regarding this).

      Annoying whenever you have to go in, can easily be waiting over an hour. More secure in person I assume anyway or it could be the scamster applying for the new one.

  • +1

    Does anyone know about the second requirement to get a new licence:

    "written notification from an enforcement authority such as Queensland Police Service"

    Does this mean QPS will be notifying people already notified by Optus, or does this mean you have to make some kind of police report using the Optus notification? It's very vague what this means.

    EDIT: ignore. It says Optus notice OR police report.

  • +1

    God help the TMR staff 😳 Going to be a huge spike in pissed off people letting out their anger over the counter.

    Hopefully most people just walk in, get it done, and walk out 😅

  • Something doesn't add up.
    in the notice from Optus there is a statement quote: "No ID document numbers or details have been affected"
    if the statement is true, why is TMR offering this replacement?

    • +1

      It depends. I got email saying ID exposed (i 'm optus customer since few years) but to my wife as she is prepaid customer and didn't shared ID earlier with Optus so No ID exposed in this case.

    • The hacker didn’t get all of the details of every customer. It seems ID#’s were only leaked for some customers. Optus is checking logs and letting customers know what information specific to them was stolen.

  • Optus Breach notice states "No ID document numbers or details have been affected."

    Yet when you do the Whirlpool Optus Login API check its got the drivers license details there.

    Who to believe?

    • +1

      Not Optus. Anyone but them.

    • The login api is the data available once you’re logged in, it’s not the same data that was taken. Optus sent an email to customers some say no ID documents others, like mine, specifically say ID document numbers were taken

  • +2

    Its a bit of a process. You have to see them at the counter and they send an email off (to optus I would guess) to confirm you are affected. Then you have to wait for a response (am still waiting) then you get a new photo and licence will be sent out. They will take your licence and you get a paper one to use until you get it in the mail.

    • Thanks ,Which branch/office did you go ? was it really busy ?

      • +1

        Just outside of Brisbane. Yes the line is way longer now than when I arrived. The big wait (for me anyway) is for them to receive a confirmation from Optus. Half an hour and still counting.

        • I read somewhere else that they take your details and then contact you in a few weeks to come back in once verified. You sure you're not waiting for something that may never come?

          • @PainToad: They started with saying it could take about 5 mins to possibly not today, I dont think they know whats really going on. Theres a bunch of people still waiting after seeing them but they are telling the people still waiting to go in they will probably not get their licence today

            • @Rain Cloud: Did you get a reference number, receipt etc.?

              • @PainToad: No, he did say something about email/sms contact if we didnt want to wait though

    • So its not Optus we are waiting for but their own dept that does some verification thing. Our branch is calling people if they leave, but that may vary by branch.

    • So I finally got a call back from them to let me know I can come in to take a new photo and get a new licence. Will go back in tomorrow.

  • I got an email from optus "Urgent update from Optus about your personal information" , does this means my personal data have been stolen?

    • Have you read the email? It will tell you what personal details have been stolen.

  • Local branch has lines out the door, not going to wait today

  • +1

    I just came back from my local branch to have my license number changed. After good 2 hours wait, all they have done was taking my details. I was then told that i will receive a phone call within few days (if not weeks). I will then have to visit the branch again to get the temp license. I was also informed that my license number will be active until that day.

    It seems really pointless to have people wait in line just to take their details. Is there any branch handles it differently?

    • +1

      same thing. Waste of time. Need to visit again after their verification and then they will take photo and signature, if needed. It's better to submit online request and they can contact the people to verify in TMR locations.
      Two visits to TMR costs more to everyone.

    • So are they actually verifying with Optus that you had the ID number breached?

      • Thats what i was told. Still waiting for them to call me.

    • I got a call back yesterday 6 hours after giving them the details, went back this morning, skipped the line (they said go straight to the front and talk to security) and all done in 5 mins from there. New photo and signature, paper licence valid for 3 week and licence SHOULD arrive in 21 days

      • Nice. Glad to hear that they let you skip the queue. I hope i get a call back soon.

  • I need WA to do the same

  • Will they issue a new DL with same expiry date or new one from date of application ? What about people who gave optus their passport and medicare numbers will cost be covered thier expiry dates be extended ?

    • I believe same expiry date. Dont have the new licence yet so cant confirm, still waiting here, been 2 hours

  • Good luck getting this sorted everyone. Went to Qld Transport today and the line was out the door with a 30+ minute waiting time.

    • I was there half an hour before it opened, the line was around the corner but it only took 20 mins to get out from that first step. Its the waiting for the verification that took forever, waited for two hours and have left, they said they will call

      • I was told there is 6 people total in TMR who process these email requests from the Customer service centre staff. By 9:30 they were quoting that there was 800+ requests from around QLD and that that was an overwhelming number for 6 people to handle. They then switched to just noting peoples details and will call us all back in at some future time to start the new number issuing process. I expect this will be months at least.
        I spent an hour and a half at Macgregor this morning just to get my details noted. The line was just as long when I left as when I arrived.

        • No different to processing anything's else.
          Maybe they need some stress leave and come back tomorrow fresh.

          They could put on a few casuals to deal with it, qt Optus expense.

  • +1

    In related fun, I've tried to activate two SIMs with Boost today.
    They have verified:
    email
    phone
    address
    driving licence
    medicare
    but apparently there is a problem with my ID.
    So now they have my passport and citizenship deets too.

    To activate a SIM. They have all that information.

    The REAL crime here is the regulations requiring the telco's to have all that in first place. They can spout "security" or "anti-terrorism" if they like, but there should be absolutely no need for a phone provider to have my medicare number. And even less of a need for them to keep it after they've verified it.

    • I guess I was lucky, i applied for a new debit card at the beginning of the week, if i tried now im not sure my DL would have been accepted, after i had gone to the TMR to get it changed. There was some confusion among people who were leaving after giving their details whether the licence was still valid, i think they said just tell the police if you get pulled over you are getting it changed because of Optus. I think there would be so many people in the same boat that they'd just have to deal with it even if there was an issue

      • From a police perspective an old license should be fine, they will no doubt be able to look up people via the old number probably forever. It'll be ID verification providers/credit providers who should start rejecting the old one as proof of identity.

    • That's big brother law enacted by the Dutton to turn Australia into a surveillance state. Until that changed the telcos hands are tied.

  • how do i get a "written notification from an enforcement authority such as Queensland Police Service" ??

    • I think you just need the email from Optus

Login or Join to leave a comment