Some South Australians are being urged to change their driver’s licence number after hackers using stolen passwords gained access to some users’ accounts on SA’s digital licence platform, mySA GOV.
- The SA government said hackers have targeted some mySA GOV accounts
- Hackers accessed data in more than 2,000 accounts during the cyber attack
- Affected account holders being contacted by the government
The South Australian government says it has taken immediate steps to secure affected accounts on the mySA GOV platform, which includes a website and an app.
The app is also used to manage COVID-19 check-ins, but that data — which can be uploaded by users without a mySA GOV login — was not breached.
In a statement, the Department of Infrastructure and Transport said the mySA GOV accounts had been breached by hackers who used passwords obtained in a cyber attack on a separate, unrelated website.
The department said 2,601 mySA GOV accounts were accessed in the attack, 2,008 of which contained registration and licensing information.
“The hackers then used the passwords they had obtained from the unrelated website to access a number of mySA GOV accounts.”
The government said there is “no evidence” of any unauthorised transactions on any mySA GOV accounts, but it had taken several steps to mitigate the risk, including:
- Blocking passwords of affected accounts
- Notifying affected customers by email of potential breaches
- Providing those customers instructions on how to change their password
- Encouraging affected customers to change their driver’s licence by attending a Service SA Centre
The department said it was “strongly recommended” that when choosing a new password, customers select a complex, unique password that has not been used for any other accounts.
South Australia became the first state in Australia to introduce digital driver’s licences in 2017.
New South Wales followed suit with a similar app in 2019, with then-Treasurer Domenic Perrotet later describing the SA digital licence system as “pretty poor, like most things out of Adelaide”.
Queensland has since introduced its own scheme, with rules introduced in July allowing drivers to hold their phones to present their digital licence to police on request.