On October 3, 2022, Optus, a major telecommunications company headquartered in Australia, confirmed that 2.1 million customers had valid or expired government identification numbers compromised and 9.8 million customers total had personal data exposed due to a cyberattack that occurred in September. Of the 2.1 million individuals with government IDs compromised, 1.2 million had their current form of ID exposed and 900,000 had expired forms of ID exposed. All 9.8 million individuals had their names, email address, date of birth, and phone number exposed. The threat actor behind the cyberattack initially attempted to extort Optus with a $1 million ransom demand in order to not publish the exfiltrated data but ended up leaking the data of 10,000 individuals on a hacking forum after not receiving the payment. The leaked data included names, addresses, date of birth, email addresses, and phone numbers. The threat actor claimed to have deleted all of the stolen data days after leaking the small portion and apologized to the victims. Optus has sent SMS messages with next step information to those whose IDs were exposed. Customers who had their driver license details compromised can request a new license number to mitigate the risk of identity theft or fraud. It is currently unknown if the threat actor actually deleted the exfiltrated data, so Optus users should remain vigilant against suspicious communications claiming to be Optus. CTIX analysts will continue to monitor and report on data breaches across the globe.