iiNet (TPG Telecom) data breach
Was I affected?
iiNet (TPG Telecom) confirmed a breach affecting about 280,000 people, exposing names, email addresses, phone numbers and addresses. You are in scope if you are an iiNet customer and TPG/iiNet contacted you about the August 2025 incident.
| Announced | Aug 19, 2025 |
|---|---|
| When it happened | August 2025 (confirmed August 16) |
| People affected | 280,000 |
| Data exposed | Names, Email addresses, Phone numbers, Addresses, Passwords and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
TPG Telecom said an attacker used a staff member's stolen login to pull data from iiNet's order management system in August 2025. Taken were about 280,000 active iiNet email addresses and 20,000 landline numbers, plus roughly 10,000 usernames with street addresses and about 1,700 modem setup passwords. TPG said no banking, payment or ID document data was involved.
What should I do?
- Change your modem/router admin and Wi-Fi passwords, especially if iiNet said your modem setup password was exposed.
- Treat emails, texts and calls that mention iiNet, TPG or your NBN service as suspect; don't click links or share codes, and contact the company through its official app or website.
- Contact IDCARE (idcare.org, 1800 595 160) for free help, and ask Equifax, Experian and illion for a credit ban if you suspect misuse.
Check the other services you use →
Sources
- TPG data breach hits 280,000 iiNet customers · iTWire (news)
- 280,000 customers' emails, phone numbers exposed in cyber attack on iiNet, TPG says · SBS News (news)