Did you get a message from Optus about your identification documents being exposed in the cyber attack?
Here's what you need to know about changing your licence number, passport and Medicare card.
Tap the links below to jump straight to that section.
TIP: If you're expecting new documents to be sent to you via the post, it might be worth locking your mailbox while you wait for them to arrive, just to be safe.
How do I replace my passport?
You can replace your passport by:
- going through Passport replacement portal
- picking up a form at a participating Australia Post outlet
- contacting an Australian diplomatic or consular mission
Prime Minster Anthony Albanese said Optus had confirmed it would cover the cost of replacing affected customers' passports.
But it's unclear at this stage whether impacted customers will be able to replace their passports free of charge or if they'll be reimbursed after paying the fee.
The APO website says it's still "working with Optus to finalise these arrangements".
Replacement passports ordinarily costs $193, while while a new passport costs up to $308.
You can also cancel your passport without having to get a replacement — that will mean that it can't be used for travel or identification purposes.
To cancel your passport, call the APO on 131 232.
The APO says compromised passports are still safe to use for travel — it's just that the details could be misused to commit identity fraud.
It says fraudsters would need your actual passport to travel under your name and ruled out other people being able to gt a passport in your identity.
"We use robust controls that protect your passport from identity takeover, including sophisticated facial recognition technology," the APO says.
How do I change my drivers licence number?
Licence numbers are issued by the states and territories, so the process changes, depending where you live. Tap the links below to jump straight to your state or territory:
ACT
Those deemed most at risk of identity theft or fraud due to the Optus data breach will be able to get a new drivers licence card, the ACT government says.
However, they will be contacted if they need to replace their licence.
The ACT government said that, if people aren't contacted by Optus by the end of the week, they don't need to replace their licence.
While the fee to replace a card is $42.60, Optus will return that amount into affected customers' accounts.
ACT licences have two identification numbers — a licence number and a card number — with both needed to verify identity.
"This means that, only if both the drivers licence number and the card number have been compromised, a replacement card is necessary," the ACT government says.
"Only a small number of people are affected and Optus will be writing to these people by the end of this week."
Here's how people can replace their licences:
- Apply online via the access Canberra website
- Contact the Resolution and Support Team at Access Canberra on 13 22 81 — they'll need need to make a payment via the phone
- Attend any Access Canberra Service Centre.
Canberrans most at risk of identity theft or fraud due to the Optus data breach are those who signed up for an Optus account this month.
From September 1, Canberrans who signed up for an Optus account needed to provide both their driver licence number and card number, to verify their identity.
NSW
Minister for Digital Government Victor Dominello said Optus would contact customers in the coming days to advise whether or not they needed to apply for a replacement drivers licence.
He said people with a digital NSW drivers licence would have an interim card number issued instantaneously via the Service NSW app while a new plastic licence card would be issued within 10 business days.
People can apply for a new licence by:
- Going through Service NSW's online portal
- Visiting a Service Centre
- Calling 13 77 88.
"The cost to replace your drivers licence is $29 and will be charged by Service NSW at the time of application — reimbursement advice will be issued by Optus to customers in the coming days," he wrote.
Mr Dominello said Optus would "absolutely" foot the bill for customers to replace their NSW drivers licences if they have been affected by the cyber attack.
Northern Territory
People in the Northern Territory who need to replace their licence will have fees waived, the Northern Territory government confirmed on Wednesday.
Affected customers will have to attend an Motor Vehicle Registry (MVR) and show their notice from Optus.
People in regional and remote parts of the territory should contact the MVR by calling 1300 654 628.
Northern Territory drivers licences include two key unique identifiers — a licence number and a card number — and the territory government said both were required for licence data to be used for identity fraud.
It's estimated that only about 1 per cent of Northern Territory Optus customers had both numbers compromised, but people who had only their licence number stolen can have their licence cancelled and re-issued.
Queensland
Queensland Transport Minister Mark Bailey said that, if people wanted to change their licence numbers, they would need to attend a Transport and Main Roads customer service centre.
They'll need a breach notice from Optus or an enforcement authority, as well as evidence of identity — a current driver's licence will do.
He posted to Twitter that new licences with new numbers would be provided free of charge to Queenslanders impacted by the breach.
A Department of Transport and Main Roads spokesperson said the department had been assisting customers affected by the Optus breach.
South Australia
A spokesperson for the South Australian Department for Infrastructure and Transport said those affected by the Optus breach could get a new drivers licence number at a Service SA Centre.
People will need to show documentation they've received from Optus, confirming they've been affected by the breach.
South Australian Premier Peter Malinauskas said the state would also be waiving the fee for those who needed to replace their licence.
Tasmania
Affected Tasmanians will be able to get a new licence number issued free of charge.
They must attend a Services Tasmania centre with proof of identity documents and show their Optus data breach communication or provide a Statutory Declaration.
Western Australia
New drivers licence cards with new licence numbers will be issued to people who have been informed by Optus that their West Australian drivers licence information has been compromised.
They'll need to attend a Department of Transport service centre or regional agent and bring the following things with them:
- Primary and secondary proof of identity
- Optus-issued document verifying a proof of breach
- Current WA driver's licence — this will need to be surrendered.
They won't be charged for this, with the West Australian government saying they will be given priority.
They'll be issued with a letter acknowledging their application for a new licence while the new cards are printed.
Victoria
Victorians will get free licence number replacements if they are impacted by the breach.
However, for now, VicRoads is asking people to not use usual replacement licence services and is instead directing them to www.vicroads.vic.gov.au/optusbreach.
There, they'll be able to fill out a dedicated form to request to have their Victorian drivers licence record flagged and protected.
"Once you submit the form you'll be sent a confirmation email and follow-up communications, including information on how to change your licence should you wish," the website says.
"The Department of Transport and VicRoads are also committed to supporting impacted individuals who wish to have their licence replaced.
"This request will be validated against the Optus information once available."
A Department of Transport spokesperson said the government would request Optus repays the cost of the new licences.
How do I replace my Medicare card?
If you used your Medicare card to prove your identity with Optus, be assured that people can't access your Medicare details with just your Medicare card number.
IDCare, a not-for-profit charity which describes itself as Australia's national identity and cyber support service, says you can replace your Medicare card if you've been affected.
The method IDCare recommends on its website dedicated to the Optus data breach means you'll have the same Medicare number that you did before, only the last digit will change.
There's three ways to replace your Medicare card:
- using your Medicare online account through myGov
- the Express Plus Medicare mobile app
- calling the Medicare program on 132 011
If your Medicare or Centrelink account has been compromised, you can call Services Australia's scams and identity theft help desk. They can help secure accounts if they've been compromised.
