The company reports that their forensic review is ongoing but that they have identified 7.9 million Australian and New Zealand driver’s licence numbers stolen.
Of these, 3.2 million were from the last ten years.
Additionally, a further 6.1 million customer records including some but not all of the customer’s names, addresses, phone numbers and dates of birth were stolen in the attack.
Like the driver’s licence numbers, a staggering 97 per cent of those records were from before 2013, and date back to 2005.
More than 53,000 passport numbers were also stolen.
The Australian Passport Office is not recommending that people need new passports.
Read Related Also: Dr. Nicole Says $44 Million Home Sale Was an Unexpected ‘Great Opportunity’ [Exclusive]
However, for those customers of Latitude who do need a new driver’s licence as a result of this hack, the company has offered to pay for the replacement of their stolen ID document.
As far as financial information goes, it appears limited to a small group of 100 customers who had a monthly financial statement stolen from the system.
This report puts the Latitude hack much closer to the scale of both Optus and Medibank but raises serious questions about the data retention policies of Latitude Financial Services.
Customers past and present are likely to wonder just why the company still retained information about customers from 2005.
Latitude said they are writing to all customers, past, present and applicants whose details were stolen to outline just what was taken and their plans for remediation.