iiNet data breach exposes 280k emails and 20k landline numbers

A data breach at iiNet, Australia’s second-largest internet provider, has exposed hundreds of thousands of customer contact details after unauthorized access to an internal order management system. The incident, detected on a recent Saturday, led to the extraction of about 280,000 active iiNet email addresses and around 20,000 active landline numbers, with a further 10,000 name, address and phone records and roughly 1,700 modem setup passwords believed to have been accessed. The company stresses that no credit card, banking information or identity documents were stored in the compromised system. External cyber security experts have been engaged, and the company has begun contacting affected customers while continuing a comprehensive investigation with government and regulatory authorities.

The data accessed are primarily used for managing and activating iiNet services, such as broadband connections. While the breached information does not include payment details or government-issued identification, the combination of emails, phone numbers, and residential addresses opens the door to targeted phishing, voice scams and other social-engineering attacks aimed at customers. The firm...