Optus CEO 'very confident' data breach was a 'sophisticated attack'

Optus CEO Kelly Bayer Rosmarin says the company is confident the data breach, which led to millions of people’s information being compromised, was a “sophisticated attack”.

Optus is now working “very closely” with the appropriate authorities and the Australian Federal Police as the case has turned into a criminal investigation.

“We’re devastated that this could occur, but it’s a good warning to all organisations that even if you have strong cyber capabilities, dedicated focus and investment in this area, there are sophisticated actors out there,” she told Sky News Australia.

She also confirmed that no financial information or passwords were compromised in the cyberattack.

“We are doing everything we can to sound the alarm broadly and to let customers be on high alert, so we hopefully avoid any harm coming from this breach,” she said.

[ASMR_Lighting]

Is she crying? Seriously. The CEO. It was a sophisticated attack. And they weren't ready. Doesn't respond to 'encryption question'. So, they are not.

[lukeh]

There's no profit in security and no punitive consequences for security breaches. They couldn't care less.

[arroeducarlion]

she cannot say it is encrypted because obvioussly it is not and to do so would be a lie they could then be held accountable for

[chuckmaddison]

Optus, in all departments are safe.
No need to worry about them.

[phil]

Crying that’s really good leadership. Give her a senior management role

[vijaymahbubani]

Excellent questions posed! Good job on grinding her for answers.

[francisgg]

She doesn't know what encryption is

[muzzleflash]

Optus has betrayed all its customers, by making them undertake intense identity requirements.

[declankeogh]

It still amazes me that companies that do have some good policies in place such as not storing passwords in clear txt still have not realised that identity details should also be encrypted and not stored in clear txt databases. These identity details such as passport, driving licence, date of birth and name are just as valuable if not more than log in credentials nowadays.

[johntowle]

Getting the message out after the horse has bolted, tis hollow words Kells once the information is in criminals hands, Kells can't guarantee that no harm will be done with this information that has been accessed from their IT systems.

[francisgg]

Sophisticated attack? A coder made an api that returned customer information and didn't make it require an unguessable password to access.

[tomjones]

I wasn't affected at all i don't keep any information on my phone for payments on any bill so forth

[zero.tolerance]

Dont worry She will be fired sacked . But who gives a sh about her or what happens to her she does not care about YOU ! . Focus on what happens to YOU and YOUR COMPENSATION change all documents all paid by OPTUS plus all other compensations . BEWARE : They actually tell You You are more than welcome to LEAVE as its way cheaper for them . Dont just leave yet wait it out until its fully settled your info is already sold ! change all info and docs what you can and wait ! and than leave !

[justin-case]

*That's how they encourage people to get digital ID?*

[savrah]

Typical dodgy CEO/politician doesnt answer the question! its simple, was it encryped or not...not hard.

[bhavyajaitly]

They have all the results they need, BUT the photo's weren't released so that's okay. No harm has been caused. What a load of crap! Optus needs to better than just provide free 12 months subscription! Calling their customers bad actors! What the actual fuck you guys! Do better.

[voxacwithstrat]

Ha ha ha they reckon the hacker was just one 'young' person. So Optus system are that garbage this can happen? I'm calling BS on this right now.

[cherylmason]

When is Optus going to contact customers with the level of risk they are facing?

[mikespike]

Didn’t bin chicken look alike Gladys find a roost here? Was someone using her back door like Dodgy Darryl to get access?! Haha 😢

[johntowle]

When was the last audit done ? Can't answer a direct and simple question Kells, time to resign..