> It would be good to know more details of the hack itself. Not much but there's this article from the ABC (Australian Public Service broadcaster) https://www.

> It would be good to know more details of the hack itself. Not much but there's this article from the ABC (Australian Public Service broadcaster) https://www.abc.net.au/news/2022-09-23/optus-rejects-claim-hack-likely-result-of-human-error/101468846 https://www.abc.net.au/news/2022-09-23/optus-rejects-claim-h... QUOTE STARTS "[They] wanted to make integrating systems easier, to satisfy two-factor authentication regulations from the industry watchdog, the Australian Communications and Media Authority (ACMA)." The process allegedly involved opening up the Optus customer identity database to other systems via what's known as an Application Programming Interface, with the assumption that the API would only be used by authorised company systems. QUOTE ENDS Also this one https://www.theregister.com/2022/09/23/cyberattack_optus/ https://www.theregister.com/2022/09/23/cyberattack_optus/ although it's six days old. This is a summary of the statements made by Optus https://whirlpool.net.au/wiki/optus_sept_2022_breach https://whirlpool.net.au/wiki/optus_sept_2022_breach . There's been some chatter on Twitter that at some point an Optus flack characterised the attack as "sophisticated" because the attackers "used Postman" so that's obviously caused a few laughs https://twitter.com/search?q=optus+postman+until%3A2022-10-01+since%3A2022-09-01 https://twitter.com/search?q=optus+postman+until%3A2022-10-0... .