News

One of Australia's 'Big Four' Banks Compromises Thousands of Customer Details

Giulio Saggin
Giulio Saggin
Tuesday 28 November 2023

Thousands of National Australia Bank (NAB) customers have had 'some personal information' compromised after the bank uploaded the details to the servers of two 'data service companies'.

The data of the 13,000 affected customers included names, dates of birth, contact details and in some cases, a government-issued identification number e.g. driver's licence number.

"We take the privacy and the protection of customer information extremely seriously and I sincerely apologise to affected customers," said NAB Chief Data Officer, Glenda Crisp. "We take full responsibility. The issue was human error and in breach of NAB's data security policies."

Ms Crisp said it was not a cyber-security issue and no NAB log-in details or passwords were compromised. The NAB systems remain secure.

NAB has contacted each customer individually, with a support team in place 24/7. The bank will cover the cost of any government identification documents that need to be reissued, as well as the expense of independent, enhanced fraud detection identification services for affected customers.

NAB has form when it comes to data breaches and in early 2017 admitted the details of around 60,000 customers were sent to a global domain email address instead of the bank's .au address. Once again, the bank apologised and took "full responsibility".

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203