Protecting your identity online
If you've been affected by the HWL Ebsworth data breach, there are simple steps you can take right now to protect yourself and your family:
Receive free advice from IDCARE
We have hired IDCARE, Australia’s identity and cyber support service to help you.
This service is free for you to use.
IDCARE’s specialist Case Managers can work with you to address your concerns about personal information risks. They can help if you think your information has been misused.
To talk to one of IDCARE's specialist Case Managers, complete an online Get Help form at www.idcare.org or call 1800 595 160.
You can also contact IDCARE using the free Translating and Interpreting Service (TIS National). Visit www.tisnational.gov.au for more details.
Case Managers are available from 9 am to 6 pm AEDT Monday to Friday, excluding public holidays.
Contact your bank
Contact your bank and let them know you are affected by a data breach. Ask if there is a way for your bank to put extra safeguards on your accounts. Ask if your bank will charge you a fee to do this.
Check your bank account daily. Contact your bank if you notice any suspicious payments or unfamiliar transactions.
Protect your government-issued identification
If your Tax file number, Medicare number or driver's licence was compromised we encourage you to follow the steps below for each government-issued identification.
Tax file number: Contact the Australian Tax Office's Client Identity Support Centre on 1800 467 033 from 8 am to 6 pm, Monday to Friday.
Information is available at www.ato.gov.au/Individuals/Tax-file-number/Lost-or-stolen-TFN
Medicare number: Information about protecting your government accounts is available at www.servicesaustralia.gov.au/protecting-your-personal-information-after-data-breach
Driver’s licence number: VicRoads can change a driver’s licence number only when there has been an attempt to commit fraud or identity theft. Information is available at
Change your passwords
Change all your bank, personal accounts, email, and social media passwords to strong passphrases.
Passphrases are made up of four or more random words, making them longer than a traditional password.
Use a passphrase of capital letters, numbers and symbols to make it harder for criminals to guess.
Use different passwords across your work and personal accounts
Do not use your work email address for personal accounts.
Update all electronic devices
Make sure your computers, mobile phones and other electronic devices have the latest updates installed.
Turn on the automatic update function on your devices.
Set up multi-factor authentication
Multi-factor authentication is a security measure that requires two or more proofs of identity to grant you access.
You can check with services like your bank, email and social media accounts about multi-factor authentication. Each service will have instructions to help you set it up.
Do not provide access to laptops or mobile phones to unknown callers
The TAC or other Victorian Government departments will NEVER phone you to ask for:
- access to your computer, or
- you to buy cryptocurrencies or gift cards.
If you receive a suspicious phone call:
- take the caller's details,
- hang up, and
- contact the company they claim to represent. Use an official communication channel listed on their website.
Never call a number provided by the scammer.
Be extra careful of scams to your email address and mobile phone
Never click on any links sent to you from unknown senders.
Don’t provide banking or personal information to anyone asking for money.
If you receive an email or SMS with a link about the data breach, do not click the link. You can visit the Scamwatch website and report this message. Click the ‘Report a scam’ button on the Scamwatch website home page.
More resources
Australian Cyber Security Centre: www.asd.gov.au/cyber-security
Scamwatch: www.scamwatch.gov.au
Moneysmart: www.moneysmart.gov.au/banking/identity-theft
