Australia files proceedings against Singtel’s Optus over 2022 data breach

The Optus entities said they would review the claims and respond in due course.

The Australian Information Commissioner (AIC) has launched Federal Court proceedings against Singtel Optus Pty Limited and Optus Systems Pty Limited, alleging breaches of the Privacy Act 1988 (Cth) in connection with the September 2022 cyberattack.

In a statement, the Optus entities said they would review the claims and respond in due course.

They noted that any potential penalties would be determined by the Federal Court, which would consider multiple factors before setting an amount.

“At this stage, the Optus Entities are not able to determine the quantum of any penalties,” the statement said. “If a contravention is found, the Court will consider a number of factors and apply a penalty amount it determines overall as appropriate based on the events that occurred.”

Optus declined to provide further comment, citing the ongoing legal proceedings.