22 AUGUST 2019
ANZ is currently responding to a data breach by another financial institution which has impacted a small number of our customers.
The data breach led to the disclosure of PayID details linked to a number of mobile phone numbers.
We understand that the information disclosed includes: full name, PayID nickname, and mobile, BSB and Account numbers of the impacted customers. The risk to customers is that those responsible may use this data to target phishing attempts to obtain customer credentials, leading to possible fraud. At this stage our monitoring has not identified any fraud as a result of the disclosure of these PayID details.
Customers with impacted accounts have been contacted and these accounts are being closely monitored. We are working with all relevant parties to manage the security of our customers' data and accounts and we will apply additional security controls to affected accounts where necessary. We will also continue to proactively contact customers where fraud has been identified.
ANZ takes the protection of our customers very seriously and we are extremely disappointed this incident has occurred.
Customers are advised to remain vigilant for phishing attempts. Customers are also reminded that ANZ will never send an email or SMS asking for your account or financial details, or log-in details for ANZ Phone Banking, ANZ Mobile Banking or ANZ Internet Banking.
For more information on how to protect yourself, please visit the ANZ security centre.
For media enquiries contact:
Brett Foley; +61 466 670 880