Sumo data breach

17 May 2024

The Department of Foreign Affairs and Trade (DFAT) is aware of a cyber incident impacting the Australian energy and internet provider, Sumo.  

Sumo’s investigation into the cyber incident has found the personal details of approximately 40,000 customers were compromised, including approximately 3,000 Australian passport numbers.     

Sumo is contacting impacted individuals directly and continues to investigate the matter to determine the full extent of the cyber-attack.    

Affected passports are still safe to use for international travel. Your passport number cannot be used to obtain a new passport. Robust controls are used to protect passports from identity takeover, including sophisticated facial-recognition technology.   

See our page on protecting against scams and identity theft for more advice on how to safeguard your personal information.   

You can also seek help from IDCARE, a not-for-profit organisation that specialises in providing advice and support to Australians on how to respond to identity theft.     

More advice on what you can do to protect yourself and your family from cyber security incidents is available on the Australian Cyber Security Centre’s (ACSC) webpage at: www.cyber.gov.au.