Hundreds of thousands of customers of Australia’s internet provider iiNet have had their personal information exposed following a cyberattack. The company, owned by TPG Telecom, revealed that on August 16 an “unknown third party” gained access to its order‑management system, the platform used to create and track customer orders.
An internal investigation uncovered that the breach exposed historic data for around 280,000 ie‑Net customers — this included active and inactive email addresses and landline phone numbers. On top of that, approximately another 10,000 customers had their usernames, street addresses and phone numbers accessed, and around 1,700 modem setup passwords were also exposed.
However, iiNet reassured affected customers that no credit card or banking details were accessed in the incident. The company also stated that no driver’s licence or other ID numbers were compromised.
The breach was made possible after the attackers used stolen credentials belonging to a staff member, enabling them to access the order‑management system.
TPG Telecom’s CEO, Inaki Berroeta, expressed regret over the incident, issuing an unreserved apology to those affected and assuring that investigations are ongoing to fully understand how the attack occurred.
iiNet has engaged an incident‑response team and is working to strengthen its security systems. Impacted customers are being contacted directly and warned to remain vigilant for any unusual communications claiming to be from iiNet.
If you’re an iiNet customer, it’s wise to:
Additionally, for corporate apartments where you handle guest feedback, it may be prudent to review internal data‑protection practices, ensure staff credential usage is strictly controlled, and reinforce awareness about phishing and credential theft.