Australian telecomgGiant TPG's iiNet subsidiary hit by data breach affecting 280,000 customers
Learn More
TPG Telecom, Australia's second-largest telco provider, is reporting a data breach affecting its iiNet subsidiary.
The cyber incident was detected on Saturday, August 16, 2025 and was caused by unauthorized access to iiNet's order management system. The order management system is used to create and track orders for iiNet services, and contains limited personal information.
Early investigations suggest the unauthorized access was gained using stolen account credentials from a single employee. TPG blocked the unauthorized access, and engaged external IT and cybersecurity experts to assist with the investigation.
Exposed data includes:
- Approximately 280,000 active iiNet email addresses
- Around 20,000 active iiNet landline phone numbers
- Approximately 10,000 iiNet usernames
- Street addresses associated with usernames
- Phone numbers linked to usernames
- Around 1,700 modem setup passwords
- Inactive email addresses and phone numbers from former customers
Some of the data pertains to people who are no longer customers of iiNet but had been stored in the system due to legal, regulatory, or operational requirements.
TPG apologized to its iiNet customers impacted by the incident and stated it will contact impacted customers, advise of any actions they should take, and offer assistance. The company will also contact all non-impacted iiNet customers to confirm they have not been affected.
