Your ad hereSponsor the Telco briefing — the header banner on every printed and downloaded copy.
breach@govern.co.nz🔒 breach.co.nzThe NZ & Australia breach register · a Govern service
Printed 7 November 2026
breach.co.nz/sector/telco/print/
breach.co.nz/sector/telco/print/
📡 Telco: reported data breaches
Every telco breach in the breach.co.nz register, New Zealand and Australia, 2022–2025. Each line is a public record; follow the short link to see the sources.
3records
9.9M+people affected (disclosed, 3 of 3)
0 · 3NZ · AU
2confirmed by regulator / court
1penalties or court action
Largest by people affected
- Optus — 9,500,000 (approx) · AU · 2022-09
- iiNet (TPG Telecom) — 280,000 (approx) · AU · 2025-08
- Telstra (unlisted-number disclosure) — 132,000 (approx) · AU · 2022
All 3 records
| Organisation | Breach | People | Data reported | Status | Tier |
|---|---|---|---|---|---|
| 🇦🇺 iiNet (TPG Telecom)breach.co.nz/breach/au-2025-iinet | 2025-08 | 280,000 (approx) | Around 280,000 active iiNet email addresses and around 20,000 active landline numbers extracted; around 10,000 usernames, street addresses and phone numbers, and around 1,700 modem set-up passwords, accessed. TPG said no ID documents or card/bank details were held in the system | Disclosed | B · Reported |
| 🇦🇺 Optusbreach.co.nz/breach/au-2022-optus | 2022-09 | 9,500,000 (approx) | Names, dates of birth, phone numbers, email addresses, home addresses; Driver licence, passport and Medicare numbers, birth/marriage certificate details and armed forces/police ID | Before the courts | A · Confirmed |
| 🇦🇺 Telstra (unlisted-number disclosure)breach.co.nz/breach/au-2022-telstra-silentline | 2022 | 132,000 (approx) | Names, addresses and phone numbers of customers who had paid for unlisted | Regulator action taken | A · Confirmed |
Reading this briefing
Tier A — Confirmed: a regulator or court has acted or published. Tier B — Reported: the organisation’s own disclosure or credible media, awaiting official confirmation. “People affected” is what the organisation or regulator disclosed; “Not disclosed” means no official figure exists, and we don’t estimate. Totals add disclosed figures only and may overlap.
breach.co.nz is an index of public record, not an investigator. Every record is drawn from regulator releases, court material or the organisation’s own disclosure, and links to its source online. Figures reflect what those sources reported; matters before the courts are allegations not yet determined. Check the live record for the latest — this print-out is a snapshot. Corrections: breach@govern.co.nz.