digiDirect digidirect.com.au digiDirect data breach: what happened and what to do
In September 2024, data from Australian retailer digiDirect was posted to a hacking forum. HIBP lists 304,337 accounts. Exposed: email addresses, names, phone numbers, physical addresses and dates of birth.
View all 13,177 breaches- Breach date
- 29 Sept 2024
- Affected
- 304,337
- Data exposed
- Dates of birth, Email addresses, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
digiDirect is an Australian camera and electronics retailer. In September 2024, data from the retailer was published to a hacking forum. Have I Been Pwned (HIBP) lists 304,337 affected accounts, with the breach dated 29 September 2024 and added on 25 October 2024.
News coverage from Cyber Daily reported the records as allegedly stolen and said it had asked digiDirect for comment. HIBP notes that about half the email addresses were on domains from external marketplaces including Amazon, eBay and Westfield, which suggests many records came from marketplace orders.
Sources checked: haveibeenpwned.com, cyberdaily.au, scamwatch.gov.au
Last verified against the official page:
What was exposed
HIBP lists dates of birth, email addresses, names, phone numbers and physical addresses.
What that lets criminals do
A full name, home address and phone number together are what scammers need for convincing parcel-delivery texts, fake order problems and impersonation calls. A date of birth adds to identity-theft risk because it's used to verify who you are.
What to do
No passwords are listed for this breach. The main steps are to be careful with messages that mention an order, and to know where to report problems. Australia's Scamwatch collects reports of scams.
What to do if you were in it
- 1
Expect phishing that mentions the breach
Treat unexpected emails, texts and calls with suspicion, especially ones that mention this breach or ask you to act fast. Don't click links in them; go to the company's site yourself. The FTC explains how to spot phishing. Australia's Scamwatch has advice on current scams and takes reports.
- 2
Be careful with delivery and order messages
A message about a parcel or an order problem that asks you to click a link or pay a fee is a common scam. Check the order in your account on the retailer's real site instead.
- 3
Be careful with your date of birth
Don't share your date of birth unless a service needs it. If you think your identity has been misused, contact IDCARE, Australia's national identity support service, or report it through Scamwatch.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email or phone number. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak. It can't remove data that has already leaked.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the digiDirect breach?
Search your email on Have I Been Pwned or run a free Serus scan. HIBP lists 304,337 accounts.
What was exposed?
Email addresses, names, phone numbers, physical addresses and dates of birth, according to HIBP.
Do I need to change my password?
HIBP doesn't list passwords for this breach. Changing it is still sensible if you reuse it elsewhere.
Did digiDirect confirm the breach?
The news coverage we cite reported the data as allegedly stolen and did not include a company statement.
Sources
- Have I Been Pwned: digiDirect
- haveibeenpwned.com/Breach/digiDirect
- cyberdaily.au/security/11174-304k-customer-records-allegedly-stolen-from-australian-camera-and-electronics-store
- scamwatch.gov.au
- consumer.ftc.gov/consumer-alerts/2022/10/have-you-been-affected-data-breach-read
- cisa.gov/secure-our-world/require-strong-passwords
- cisa.gov/secure-our-world/turn-on-mfa
Something wrong or out of date? Tell us and we'll re-check it.
