Hundreds of thousands of iiNet customers have potentially had their details stolen after the internet provider was hit by a cyberattack.
The TPG-owned broadband company confirmed today that an “unknown third party” had access to its order management system on August 16, which is used to create and track orders for iiNet customers.
An internal investigation found historic data from around 280,000 iiNet customers were exposed in the breach, including active and inactive email addresses and landline phone numbers.
READ MORE: ‘Do the deal’: Trump hosts historic White House war summit
Another 10,000 customer user names, street addresses and phone numbers were also accessed, along with 1700 modem set-up passwords.
iiNet said no credit card, banking or financial information has been compromised.
It also confirmed no driver’s licence details, ID or bank details were accessed by the hackers.
The hackers gained access through a staffer’s stolen account credentials, iiNet said.
”We unreservedly apologise to the iiNet customers impacted by this incident,” TPG Telecom chief executive officer Inaki Berroeta said.
“We are continuing our investigations to ensure we understand all details surrounding this incident.
“We will begin contacting customers to make them aware of the incident, apologise and provide details on the support available.”
READ MORE: Call for ‘death tax’ to help Australia raise $70 billion
READ MORE: ‘Ketamine Queen’ enters plea over Matthew Perry’s death
iiNet said it had engaged its incident response team and was working to enhance the security of its team.
An investigation into the attack is ongoing.
Impacted customers are being contacted by iiNet.
Customers have been warned to “be alert” over any suspicious or unusual communications claiming to be from iiNet.
DOWNLOAD THE 9NEWS APP: Stay across all the latest in breaking news, sport, politics and the weather via our news app and get notifications sent straight to your smartphone. Available on the Apple App Store and Google Play.
