Latitude Finance (GEM Visa) - Data Breach (March 2023)

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › Latitude Finance (GEM Visa) - Data Breach (March 2023)

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8

2061 posts

Uber Geek

#3072715 5-May-2023 14:51

dfnt:

It is better to assume your details were obtained, than remain ignorant waiting to be contacted like some people seem to be choosing to do. Ignorance is bliss I guess.

At the very least renewing your license is a small $43 cost, vs your identity being used and your credit rating ruined because of it..

But it comes down to whether there is any point renewing it. As mentioned previously, the only thing that changes is the version number. And I don't recall many institutions requesting the version number.

So you get a new licence, with the same licence number as the breach, and you may be no better off.

In my case, name, DOB, licence number, mobile number and address were breached. The first three I can't do anything about, I could change mobile numbers I guess, but I've had it twenty years, and my address is different now as well.

Tradepub

Free professional, reference and technical white papers (affiliate link).

richms

27892 posts

Uber Geek

Trusted

Lifetime subscriber

#3072718 5-May-2023 14:53

Version number is needed when applying for things like zip and afterpay to verify it against whatever they use to verify it on.

If you do not have accounts with the part payment providers then it might be an idea to apply for one even if you dont use it because that way noone else can apply in your name. That is a common way to get things from stolen ID information since its all automated.

Richard rich.ms

russelo

328 posts

Ultimate Geek

#3072727 5-May-2023 15:31

Is it possible to request a new driver's license number during renewal/replacement citing the data breach from Latitude?

concordnz

462 posts

Ultimate Geek

Trusted

EMT (R)

#3072729 5-May-2023 15:38

richms:
Version number is needed when applying for things like zip and afterpay to verify it against whatever they use to verify it on.

If you do not have accounts with the part payment providers then it might be an idea to apply for one even if you dont use it because that way noone else can apply in your name. That is a common way to get things from stolen ID information since its all automated.

Applying to organisations you aren't going to use, seems counterintuitive - as then your financial information is at-risk in more locations, just waiting to get hacked.... 👀😬

HelloThere

168 posts

Master Geek

#3072772 5-May-2023 20:27

Received my notification yesterday. Time for a new licence I guess.

Unfortunately, the information you provided at the time has been stolen as a result of the cyber-attack.

This information includes:

A current New Zealand driver licence number and version number
Your personal information which, where applicable, includes your full name, address, date of birth and phone number
General financial information that was used to assess your personal loan application which, where applicable, includes details about your employment, income, expenses, assets and liabilities
Specific financial information including:
A Branch code/bank code/account number, so we could disburse funds
A Latitude personal loan account number

Benoire

2752 posts

Uber Geek

#3072782 5-May-2023 20:41

For those that got notifications, did you have the gem visa or an actual loan via latitude finance?

mudguard

2061 posts

Uber Geek

#3072783 5-May-2023 20:49

Benoire: For those that got notifications, did you have the gem visa or an actual loan via latitude finance?

I had a GEM Visa which has been closed for about four years at least, perhaps five.

Benoire

2752 posts

Uber Geek

#3072789 5-May-2023 21:19

mudguard: had a GEM Visa which has been closed for about four years at least, perhaps five.

OK thanks. I've got a Gem Visa but so far no notification but then I think my license was the one I replaced in about 2020,so hopefully completely different.

HelloThere

168 posts

Master Geek

#3072794 5-May-2023 21:30

Benoire: For those that got notifications, did you have the gem visa or an actual loan via latitude finance?

Both.

ANglEAUT

2273 posts

Uber Geek

Trusted

Lifetime subscriber

#3073057 6-May-2023 12:47

concordnz: I'm in a quandary, ... But I've both moved house and changed email address.
(so they have no way of contacting me) ...

Same here. See #3072480 where I posted "My problem is, I think my contact details are out of date, so don't know if they can get hold of me. Several contact attempts from me & I still haven't heard from them. 😡" I did contact them multiple times over the weeks & still haven't heard back. I'd recommend you try to contact them & document what you did. Maybe that documentation will be usefull. Best case scenario, you will never require the documentation, but I doubt it.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2273 posts

Uber Geek

Trusted

Lifetime subscriber

#3073061 6-May-2023 13:02

richms: ... If you do not have accounts with the part payment providers then it might be an idea to apply for one even if you dont use it because that way noone else can apply in your name. ...

This is known as planting your flag & should be done for high value sites & systems. I don't think I'll supply new info to the part pay providers to this end. Planting your flag with IRD, NZ Post, your insurance providers & your doctors office? Go for it.

See episode 190 of the Intel Techniques podcast for more.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

PolicyGuy

1701 posts

Uber Geek

ID Verified

Lifetime subscriber

#3074534 10-May-2023 13:07

Latitude's data security being investigated after cyber-attack

Regulators across Australia and New Zealand are now investigating the financial service company's customer data retention policies and protection.

Latitude was hit by a cyber-attack in March.

At least 7.9 million Australian and NZ drivers licences were eventually confirmed as stolen, and 6.1 million customer records.
Some of the customer data stolen was provided before 2013 — including some dating back to 2005.
It included information from before Latitude was Latitude, and was instead an entity under GE Money.

Now, the Office of the Australian Information Commissioner (OAIC) and the New Zealand Office of the Privacy Commissioner (OPC) have commenced a joint investigation into the company's personal information handling practices.

More here: https://www.abc.net.au/news/2023-05-10/asx-markets-business-live-news-may10-2023/102325386?utm_campaign=abc_news_web&utm_content=link&utm_medium=content_shared&utm_source=abc_news_web#live-blog-post-28144

BlueShift

1692 posts

Uber Geek

#3074573 10-May-2023 14:59

PolicyGuy:

Latitude's data security being investigated after cyber-attack

Regulators across Australia and New Zealand are now investigating the financial service company's customer data retention policies and protection.

Latitude was hit by a cyber-attack in March.

At least 7.9 million Australian and NZ drivers licences were eventually confirmed as stolen, and 6.1 million customer records.
Some of the customer data stolen was provided before 2013 — including some dating back to 2005.
It included information from before Latitude was Latitude, and was instead an entity under GE Money.

Now, the Office of the Australian Information Commissioner (OAIC) and the New Zealand Office of the Privacy Commissioner (OPC) have commenced a joint investigation into the company's personal information handling practices.

More here: https://www.abc.net.au/news/2023-05-10/asx-markets-business-live-news-may10-2023/102325386?utm_campaign=abc_news_web&utm_content=link&utm_medium=content_shared&utm_source=abc_news_web#live-blog-post-28144

Would have been nice if they'd investigated it before the breach, rather than waiting for the horse to bolt first.

Unless they issue a punishment involving paying large sums to affected customers, then I'm in!

clinty

1176 posts

Uber Geek

Lifetime subscriber

#3091367 18-Jun-2023 13:35

Still more people just getting the initial letter.

Mine arrived yesterday

Some Latitude customers still not notified

Seems.like they may have had a selective policy on deleting info - they had an email address that was perfectly valid for the entire time I had the account, and is still valid

Clint

k1w1k1d

1464 posts

Uber Geek

#3091424 18-Jun-2023 14:22

I also got one in the mail yesterday.

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8