Optus data breach exposes details of up to 9.8 million Australians
22 Sep 2022
Australian telecoms firm Optus disclosed a cyber attack exposing personal data of up to 9.8 million current and former customers.
Insights for Asia, including India, and for Australia, New Zealand, and the Pacific.
Australian telecoms firm Optus disclosed a cyber attack exposing personal data of up to 9.8 million current and former customers.
Thailand’s Personal Data Protection Act 2019 comes fully into force after repeated postponements.
India’s CERT-In issues directions requiring cyber incidents to be reported within six hours and logs to be kept for 180 days.
Japan’s amended APPI introduces mandatory breach reporting and tighter rules on cross-border transfers.
Attackers stole around $620m in cryptocurrency from the Ronin bridge behind Axie Infinity; the FBI later linked the theft to North Korea’s Lazarus Group.
Singapore’s Healthcare Services Act 2020 begins its phased commencement, modernising licensing and oversight of healthcare providers, including data safeguards.
Amendments to Australia’s SOCI Act extend coverage to 11 sectors and introduce mandatory cyber incident reporting.
China’s PIPL introduces consent-based processing, strict transfer rules and extraterritorial reach for personal information of people in China.
India’s Central Electricity Authority issues its first cyber security guidelines for the power sector, including trusted source procurement.
China’s Critical Information Infrastructure Security Protection Regulations set enhanced security duties for critical operators.
Police reveal Operation Trojan Shield, in which criminals used the FBI-controlled Anom phone app, leading to over 800 arrests.
Singapore’s amended PDPA introduces mandatory data breach notification.