• expired

[VIC] Free New VIC Drivers Licence for Optus Data Breach Customers @ VicRoads

5230

The website has been updated with the following information.

A dedicated form has been created for concerned customers to request to have their Victorian driver licence record flagged and protected on the Victorian and national licence databases and the Australian Government's document verification service. 

You can access the secure form here (External link).


Any Optus customer who is concerned about their licence information is recommended to contact VicRoads via the dedicated channels above to request to have their details flagged.

The Department of Transport and VicRoads are also committed to supporting impacted individuals who wish to have their licence replaced. This request will be validated against the Optus information once available. 

Further information on licence replacements is expected shortly. In the interim, please do not use the usual replacement licence services.

Victims of the attack can refer to the advice of experts including:

Victorian Government organisations impacted by a cyber incident must report it to the Victorian Government Cyber Incident Response Service.

Mod note: The start time for a free Driver's License replacement offer is yet to be determined, and according to the site, "The Department of Transport and VicRoads are currently working through a process to support an anticipated high-volume of requests.".

Do not request a license replacement until further announcements are made.

Optus media release updates on the cyberattack

See Also: Driver License replacements for other states.

QLD, SA, VIC, TAS, WA, NSW, NT

Related Stores

VicRoads
VicRoads
Optus
Optus

closed Comments

  • +6

    Qld license at Vic roads?

    • +22

      Only for data breach customers. Unfortunately I haven't recently purchased any data breaches.

      • +21

        You can check what personal info was compromised by following these instructions (i.e. for those of us who can't remember if we gave Optus our driver's licence and/or passport details):

        https://whirlpool.net.au/wiki/optus_sept_2022_breach

        • +2

          Interestingly, by logging into my Optus Acct and using the first URL in the whirlpool post I can see a contactID, some contact details and an indicator that Optus have used my Drivers licence as ID.

          Then by copying my contactID into the 2nd URL I can see all my details INCLUDING my actual driver's licence number.

          I didn't really expect this.

          • -3

            @thwarted: What did you expect?

            • +3

              @McFly: I expected my drivers licence number to NOT be exposed since its only use AFAIK is to prove my identity during the service activation phase. BTW I also just noticed that it's exposed in the first URL as well.

              Clearly the mechanisms and processes around ID need an urgent overhaul to bring us into line with easily achievable, acceptable standards.

              • @thwarted: It is not exposed, it is (at least now) only available for the account owner, but I agree that it shouldn't have been stored in the first place.

                • +2

                  @bio: The API was exposed to the public Internet without any authentication.

                  • @hoit: Yes, it was, that's why I said "not exposed […] at least now". My point is, the root issue is to store it while (as far as I understand) they were not required to that by law.

        • Thank you for sharing the link. I had received a generic email form optus about the breach without saying anything about what information was lost. Forget about an explanation about why they continued to retain my id and other documents on an ongoing basis after I signed with them.4-5 years ago. So much for their transparency!. I wasn't sure what information they retained. Now I know!

        • How does Optus know what personal info was compromised?
          They have only just found out they were compromised.

          Pretty slack company they are. I used to work there, and whilst there our main database (sharepoint site) was subject to a ransomware attack. We lost 3 months of recent data as all the backups were encypted as well. This was never reported.

    • Copy paste fail

  • +6

    Why no NSW?

    • +25

      "You will need to pay for the replacement and will need to discuss with an Optus representative if you wish to be reimbursed."

      facepalm

      • +11

        Gladys Berijilian now works at Optus.

        Optus have bought protection from NSW liberals.

        • +3

          NSW govt is looking bad compared to QLD, VIC and SA. Far out.

          • +1

            @neil aus: At the end of the day the tax payer is paying for these free licenses. I don't think it's unreasonable to push Optus for the cost instead.

    • +1

      NSW Customer Services Minister Victor Dominello said people in the state can get a new digital driver's licence issued instantly via the Service NSW app.
      A new plastic card will be issued within ten business days.
      The new licence will cost users $29, with "reimbursement advice will be issued by Optus to customers in the coming days".

      New changes allow Optus data leak victims to change licence numbers

      • Waiting for the Services NSW app to be updated.
        I can't see anyway to action it at the moment.

      • +1

        This actually seems like the best way,

        Making sure Optus pays, so the fee's don't get taken out from taxes paid by Aussies.

      • +3

        They’re only swap for a new “card number” not licence number.

        Pretty dumb move by Service NSW. It’s the licence number that the needed for ID.

        • exactly, I updated mine before I looked into this. Can confirm that the Licence number stays the same. Very pointless!

        • You also need expiry for ID check, which would be updated when getting a new card I would assume.

          • @nomadspartan: My expiry remained the same.

            • +1

              @Bramasaurus: lol.. what on earth is the point then..

              • +1

                @jordnz: I question Service NSW that, this is their response:

                The rules for verifying driver licence changed on 1 September 2022. Now, organisations must verify both your licence number AND your card number.

                The Document Verification Service (DVS) makes it harder for people to use fake identity documents. It checks whether the biographic information on your identity document matches the original record. The result will simply be ‘yes’ or ‘no’. The DVS does not check facial images and is used in both the public and private sector.

                The Document Verification Service (DVS) is currently used by:

                120 Commonwealth, state and territory agencies
                1100 private sector organisations including banks, credit agencies and telcos.

                Every time Service NSW replaces your licence a new card number is issued. This means the DVS will only verify the details of your most recently issued licence. This helps to protect your identity without having to change your licence number.

    • +33

      Dom.has asked Gladys to appoint John to sort it out.

      • +10

        He's qualified bruz

        • It was dem koala's stooge, we need to wipe them out.

      • +2

        Bruz will sort you out instead.

    • +13

      Cause ServiceNSW only cares about $$$$. It is a Lib gov after all.

      • +9

        Because Service NSW cares about tax payer money being spent to fix corporation failures

        • Gov can charge back from Optus as fine rather asking every citizen to claim it back from optus. Not very difficult tbh if they want.

          • @EnALup: Fair enough, but cost of administration for the whole process needs to be considered too

      • Not a partisan hacker. No?!

  • -1

    Why does VicRoads have my QLD Drivers license details, and where did then get them from???

    • +51

      OPTUS site duh

      • +2

        Maybe the left hand of our public service will finally talk with the right? Thanks Optus 😂

    • +2

      They share drivers info to one another, that's why you still get your fine in your letterbox if you get caught for speeding interstate.

    • +4

      Bought it off some bloke on the Dark Web

    • +1

      I'm happy for VicRoads to replace my Qld license, they charge less than $30, QLD Transport want over $80.

  • The link says nothing about a free replacement? Just that you can flag the current one

    • +9

      It's free, VICRoads will ask optus to pay for it. That's what I heard from the news this evening.
      Maybe they haven't updated the site yet, it was a late announcement.

  • +2

    "Anyone who has been notified by Optus that their licence details have been involved in the breach can contact VicRoads from Wednesday 28 September to have their Victorian driver licence record flagged. "

    "Anyone who is concerned about their licence details and has been notified by Optus that they have been involved in the breach can contact VicRoads from Wednesday 28 September to have their record flagged and request a replacement."

    So are they just flagging the licence or are they also replacing the licence ( including a new licence number)?

    • I don’t think the site has been updated since the announcement via media at 7pm

  • +23

    Optus should pay all the admin cost

    • Mate, I had international documents on Optus account apparently. Good luck to me trying to get Optus to pay for all those documents that are replaced by some other government…

    • I am gonna switch to telstra asap

      (profanity) damn optus

      • That's the spirit ! "News flash" , the damage is done ….

    • +2

      Even more than that. Kelly Rosmarin either needs to cut her salary dramatically or step down as CEO. Optus CIO need to step down as well. Optus should reimburse all affected customers (old and current) and provide immediate services to assist customers fix their blunder.

      Optus' reputation is spent with this mess up and they're doing nothing to even pretend it's a big deal

      • I hope so as well, but unfortunately the world doesn't work in that way.

    • The license renewals are exspenve at $292.80 for 10 years. I assume they factor in admin into that cost.

  • +5

    "We will request Optus repays the cost of the new licences to the Victorian Government."

    https://www.abc.net.au/news/2022-09-27/online-account-claims…

    • +3

      "We will request shall demand Optus repays the cost of the new licences to the Victorian Government."

      FTFY.

  • +6

    Why should we pay for Optus’s failure (via Qld, nsw, vic, wa tax etc) . Shouldn’t Optus themselves pay for customers to get new licences etc?

  • +2

    Anyone know if this will this extend the expiry date?

    • +2

      Its a replacement/change of ID number, not a renewal. Same expiry date.

    • +17

      They're billing Optus, they should do 10 year renewals for everyone while they're at it.

      • Yeah , just for you !

  • +13

    Optus should pay for all the financial lost and potential future damage as a compensation to all of the people who are victims in this instance. They can't just say sorry and walk away from this easily.

    • +2

      The law is pretty poor in terms of penalties, would need to sue them.

  • +5

    And here's the actual useful info:

    www.vicroads.vic.gov.au/optusbreach

  • +10

    Now what about my passport tho

    • +8

      DFAT has brushed their hands off, saying no one can travel with just a passport no, but it doesn't take away the risk of financial fraud.

    • +6

      Exactly. Both drivers license and passports were compromised right??? Need to replace both!!

      • +3

        Depends on what ID people gave them. Most people probably gave one or the other.

        • +2

          You cash find out for sure by following this https://whirlpool.net.au/wiki/optus_sept_2022_breach

          • -4

            @evasive: Doesn’t work if you’re no longer a customer.

            • +5

              @[Deactivated]: It worked for me and I haven't been with optus for over 2 years.
              When you log in, you get an error saying you have no active accounts but the links provided on whirlpool still work.

    • +2

      Welp not using my passport for Id now.

      Stick with drivers

      • You're thinking about this the wrong way round. It's not about what YOU use as ID… it's what someone impersonating your identity uses for ID. Unless you're talking a long game and saying from now on you don't want to expose your passport details in case of another breach in the future…?

        • +2

          I think he just meant that driver's license is much easier to replace than passport.

    • -1

      They have announced no replacement passport will be offered as a result of the breach. The passport system is already too banked up to deal with it. You are looking at a 6 month wait right now for passport renewals, can't imagine trying to add another few million people onto the list.

      • No they didn’t. All they say in the passport.gov.au is ‘apply for a passport if you like, but you are paying for it’

      • I got my passport renewed in 3 weeks.
        It arrived a couple of weeks ago.
        I don't know why the newspapers say it takes 6 months to renew.

        Unless the newspapers found some people with complicated passports to talk to
        eg having to check with overseas embassies before renewing, visiting locations of concern

        • rumour has it that what the people in that processing dept have done is - class backlog as backlog - remediate / lower SLA unmet by printing out JUL / AUG submissions to increase on output performance, and lower OVERALL turnaround kpi times …. dunno how that works but ooookaaay….

  • +13

    Optus should pay for the issue of new passports too!

    • Yup

    • And the rush fee

  • -6

    How is this a deal… just info from a post spread into 'deals' - rumours about free replacement is not a deal either…

    This topic has been covered in the forums https://www.ozbargain.com.au/node/727200

    • +1

      This is confirmed now, no longer a rumour.

      • Check my link above.

        • -3

          I've already read it, just think this post is out of place as a 'deal'

    • +4

      Does it really bother you that much? Has it ruined your whole day to see this being posted as a deal to help so many people?

      • I'm not angry and I didn't downvote the deal, just believe it's out of place. Seems people don't like other people having a difference of opinion.

        • Seems people don't like other people having a difference of opinion.

          Yes we do!

  • does that mean I get a new 3 years license? renew is due next year

    • +1

      Same dates, this is not a renewal, just a reissue.

      • Does that mean the number is the same? What’s the point if so…

Login or Join to leave a comment