Vodafone Australia has confirmed that its customer database has been compromised by an employee or possibly a dealer, who then shared their access password with outside parties, revealing the personal details of the company’s customer base.
According to the company, it became aware of the security breach when contacted by a local newspaper, and has launched an internal investigation to find out who the culprit is, and how the breach occurred. The company also stated that all internal passwords were being reset to prevent further access to the database.
According to Vodafone Chief Executive, Nigel Dews, it appears to have been a one-off incident, but we are investigating that thoroughly now and they will have a much better picture of that in the next 24 to 48 hours.
Australia’s Privacy Commissioner is also investigating the security breach, but even if the company is found to have been negligent, the Commissioner has no powers to issue sanctions against the company.
The security breach comes at a bad time for the company as it deals with increasingly vocal customer complaints about network quality and a possible class-action lawsuit over the issue.