11 October 2022
The privacy investigation began
The OAIC opened an investigation into Optus’s handling of personal information after the September disclosure. Its stated questions included whether the company took reasonable steps to protect the information it held and whether collection and retention were necessary. The investigation was a process for examining the breach; opening it did not establish liability.
22 May 2024
A telecommunications regulator brought its own case
ACMA announced Federal Court proceedings alleging that Optus failed to protect confidential customer information from unauthorised interference or access. Its statement concerned the September 2022 breach. This was a separate regulatory action under telecommunications law, with allegations for the court to decide. The announcement should not be read as a fine already imposed. In its 14 June 2024 response, Optus Mobile said it intended to defend the proceedings and that any penalty was for the Federal Court to determine.
Telecommunications proceedings · ACMA · 22 May 2024 · Optus response to ACMA case · 14 June 2024
8 August 2025
The Information Commissioner sought civil penalties
The Australian Information Commissioner then filed a separate civil penalty proceeding. The OAIC alleged serious interference with the privacy of approximately 9.5 million Australians through inadequate protection of personal information. That figure describes the Commissioner’s allegation, not a finding by a court or proof that every person’s details were published online. Filing a case also does not establish a compensation payment to customers.
12 December 2025 · trial scheduled
Customers’ class action gained a future trial date
Alongside the regulator cases, Slater and Gordon brought a customer class action in April 2023. Its current case page says Justice Beach set the trial on 12 December 2025 to commence on 7 June 2027, and ordered mediation by 12 February 2027. These are future procedural milestones. That trial date concerns the customer class action, rather than the Information Commissioner’s separate penalty case. The firm reports that an earlier May 2025 mediation did not settle the class action.
Customer class action and scheduled trial · Slater and Gordon · current case page
August 2026 · reported in October
A separate complaint may continue, but the decision is preliminary
Maurice Blackburn’s October 2026 update says the Commissioner advised in August of a preliminary view that its representative complaint should continue. The firm says it is awaiting a final determination. This complaint is distinct from the civil penalty proceeding and customer class action. The update establishes the firm’s account of the procedural position; it does not establish a final ruling or compensation award.
Representative complaint · Maurice Blackburn · October 2026 status update
The evidence
Sources for this update
- 01Privacy investigation opened · OAIC · 11 October 2022
- 02Telecommunications proceedings · ACMA · 22 May 2024
- 03Privacy civil penalty action · OAIC · 8 August 2025
- 04Customer class action and scheduled trial · Slater and Gordon · current case page
- 05Representative complaint · Maurice Blackburn · October 2026 status update
- 06Optus response to ACMA case · 14 June 2024
Where the story stands
The story continues when the evidence does.
The original breach is established; the later cases have separate purposes and timetables. Current participant updates identify a scheduled customer trial and a preliminary complaint-continuation view, without establishing a final compensation outcome. We will follow a final complaint determination, mediation results and court decisions as they become public. This account concerns the September 2022 breach, rather than later Optus outages or sales practices.