
VicRoads said it was in discussions with Medibank to understand if Victorian driver's licence data had been part of their breach, but said it did not have any confirmation that any Victorian driver's licences had been exposed.What is the point of entering license keys in the License Tracking module if LANSweeper is unable to provide a count of the devices using that key in the License Report? I have been told (and read) in previous posts that LANSweeper only looks at the software title and gives a total count. The government said it would seek reimbursement of costs from Optus for the replacement of the licences. "It is not really specified how the main database will be protected, how validations will occur for existing companies, and how mismatches and existing licences holder queries will be treated." "What good is a verification number if it too is stored with the data that gets breached? It certainly is not a form of 2FA," he said. He also cast doubt on implementing a verification number as a security measure. "For the system to have any purpose, there needs to be both replacement of all Victorian licences by a set date and centralised enforcement, protection and validation of the verification data on an ongoing basis," he said. He said some Victorians would be waiting 10 years, as this is the maximum time a licence is valid. "The Victorian government will work to progressively implement this additional protection for all 5 million Victorian licence holders once the rollout for those impacted in the Optus data breach is completed," VicRoads said.Ĭybersecurity expert Simon Smith said this was "not good enough" and all licences needed to be moved to the new system.

While new cards will be provided to the licence holders caught up in the breach, the security measures will become standard from November 2022 for all new and replacement licences. ( AAP: Dan Peled)Ībout 342,000 Victorians flagged as directly affected by the Optus breach will receive their new cards by the end of the year, while the remaining 600,000 identified by the Department of Home Affairs can expect their cards by the first quarter of 2023.

Almost 10 million Optus customers in Australia may have been affected by October's cyber attack.
