Final week’s cyberintrusion at Australian telco Optus, which has about 10 million clients, has drawn the ire of the nation’s authorities over how the breached firm ought to cope with stolen ID particulars.
Darkweb screenshots surfaced shortly after the assault, with an underground BreachForums consumer going by the plain-speaking identify of optusdata
providing two tranches of information, alleging that they’d two databases as follows:
11,200,000 consumer data with identify, date of delivery, cell nmber and ID 4,232,652 data included some type of ID doc quantity 3,664,598 of the IDs have been from driving licences 10,000,000 deal with data with e mail, date of delivery, ID and extra 3,817,197 had ID doc numbers 3,238,014 of the IDs have been from driving licences
The vendor wrote, “Optus if you’re studying! Worth for us to not sale [sic] information is 1,000,000$US! We offer you 1 week to resolve.”
Common patrons, the vendor mentioned, may have the databases for $300,000 as a job lot, if Optus didn’t take up its $1m “unique entry” provide inside the week.
The vendor mentioned they anticipated fee within the type of Monero, a well-liked cryptocurrency that’s more durable to hint than Bitcoin.
Monero transactions are blended collectively as a part of the fee protocol, making the Monero ecosystem right into a sort-of cryptocoin tumbler or anonymiser in its personal proper.