2Degrees unauthorised access to account

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2Degrees unauthorised access to account

MattLNZ

4 posts

Wannabe Geek

#319058 18-Mar-2025 18:11

Not sure if anyone is in a similar boat, but I've received an email from 2degrees stating that my account was part of a data breach.
They don't mention how many accounts were accessed, they just say "Some".

Pretty shocking from them.

I only have broadband with 2Degrees and after changing passwords, it appears they require a 2Degrees only number to be added to the account to be sent a verification code to reaccess the account.

Advise changing your password asap if you have received this.

This is a filtered page: currently showing replies marked as answers. Click here to see full discussion.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3355001 18-Mar-2025 21:18

Ok, here is an official communication:

Our security team identified that a number of customers have had their My 2degrees portals accessed without consent.

We suspect this occurred due to an unauthorised third-party obtaining email addresses previously linked to weak or reused passwords and using these to maliciously access customer's accounts.

2degrees has not been the source of the data breach.

We have taken several steps to mitigate the impact of this on customers.

We have locked down those accounts we identified and forced a password reset. We have blocked suspicious IP addresses attempting illegitimate access requests and taken other measures to protect our customers.

When these customers log into their 2degrees account they will be required to set up a new password.

We are recommending customers update their accounts with a strong and unique password that contain a mix of letters, numbers and special characters.

We also recommend customers check any sites which have used the same login credentials and update these.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#3355024 19-Mar-2025 00:54

Hey @MattLNZ - I'm mentioning you as this is important.

It is highly likely you've been involved in a password breach. As above, please check your email addresses in https://haveibeenpwned.com/

Please cease use of this password ASAP and consider using a password manage to set random, secure passwords across all your sites. This is easy and here is a simple how to video for Bitwarden (the password manager I recommend) -

There is also a password manager likely built into the web browser you're using, on your phone etc but Bitwarden is fully cross platform and easy to use so I would recommend that above everything else.

I can't stress this enough - if you've got this email, you've likely been involved in a breach. If this password is used anywhere else (banking, email or anything sensitive) you need to go through and change these ASAP.

This also goes for anyone else who received this email. Please, take it seriously and use this reminder to secure yourself.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.