Latitude Financial’s 2023 data breach affected approximately 14.1 million people in Australia and New Zealand, including current and former customers and applicants—not just current customers. The information exposed differed by person and could include identity-document details, contact information, Medicare details or information from a credit application. Latitude says bank-account passwords and credit-card expiry dates and CVCs were not compromised.
What happened in the Latitude Financial breach?
Latitude disclosed a malicious cyberattack on 16 March 2023. The company said attackers used a compromised credential obtained through a third party to access its network during the preceding few days. Latitude said it alerted the Australian Federal Police and Australian Cyber Security Centre and notified privacy regulators in Australia and New Zealand. The OAIC and New Zealand Privacy Commissioner announced a joint investigation on 10 May 2023.
The affected population includes people in both countries who had applied for, enquired about or sought quotes for credit products from Latitude or predecessor businesses. Some records dated back many years, so an old application or enquiry may be relevant even if you never became a customer.
Was your information exposed?
The headline figure is approximately 14.1 million individuals in Australia and New Zealand, as reported in the OAIC’s investigation materials. It is often rounded to 14 million. That is not a count of current customers alone, and it does not mean each person had every kind of information listed below exposed.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors#1 Best Overall
- SHIELD YOUR PRIVACY WITH THE ID DEFENDER ROLLER STAMP: Tired of worrying about your personal information falling into the wrong hands? The ID Defender Roller Stamp offers a simple yet effective solution. With a unique wide camouflage pattern, it quickly and easily conceals sensitive data on a variety of surfaces.
- PRIVACY PROTECTION: useful not only as an ADDRESS BLOCKER or ID POLICE, but also keeps away preying eyes from invoices, authority documents, checks, bank statements and many more.
- SIMPLE TO USE: Just remove the cover and swipe. The wide swipe makes it easy to cover sensitive information.
- VERSATILE APPLICATION: Ideal for a variety of documents, including contracts, court documents, shipping labels, tax returns and more.
- LONG-LASTING INK: The high-quality ink works on both glossy and standard paper and provides up to 330 feet of coverage.
Latitude’s current cyber-response page lists approximate counts by data category. These are company-reported figures; they should not be added together or treated as counts of unique people, since categories may overlap and refer to different records.
| Information category | Latitude’s approximate count |
|---|---|
| Driver licence numbers | 7.9 million |
| Copies of driver licences or passports | 103,000 |
| Passport numbers | 53,000 |
| Monthly account statements | Fewer than 100 |
| Income and expense information used to assess loan applications | About 900,000 applications |
| Bank account numbers within the loan-application information | About 308,000 |
| Credit-card or credit-card account numbers within the loan-application information | About 143,000 |
The counts and categories are from Latitude’s current cyber-response page, checked 8 October 2026. The company says the overwhelming majority of the bank and card account numbers in application information were expired or closed. These were account numbers, not bank-account passwords. Latitude says credit-card expiry dates and three-digit CVC security codes were not compromised.
Information that may have been involved
Depending on the person and record, exposed information could include names, contact details, dates of birth, driver licence or passport numbers or images, other identity-document details, Medicare card details, and application information such as employment, income and expenses. These are possible categories, not a checklist that applies to everyone.
Rank #2
- Protect Your Privacy Effectively: you can use this identity protection roller stamp to flip personal information in under 2 seconds and save time and effort, effectively hiding and protecting your personal information, such as phone numbers, social security numbers, bank statements, shipping addresses, tax documents,data, billing addresses and many more
- Ideal Replacement for Shredder: if you are still using a shredder to shred cards or papers that are printed with your personal information, this security stamper roller will be an alternative tool to block out your privacy effectively and easily
- Refillable and Long Term Use: this confidential stamp can cover a total length of up to 100 meter/ 109 yards, approximately 3,200 prints are covered, pattern width is about 0.78 inches; When ink runs out, you can refill the security stamp with ink
- Easy to Use: just continuous roll the address blocker roller stamp to conceal information, and roll on a second layer for maximum protection, works on paper, envelopes, folders, address labels, etc., please note that may not work on smooth surfaces
- How to Refill the Ink: there are 4 pieces of ID stamp refills, each is about 1.5 ml, you just need to unscrew the cap of the ink bottle (not disposable, you can close the cap for next time of use), then insert it into the hole on the side of the stamp, then turn it upside down, about 5 minutes later, the most of the ink will be replenished to the security roller stamp
Why older applicants may be included
In a 27 March 2023 update, Latitude reported that a further 6.1 million historical records had been identified, dating back to at least 2005; it said 5.7 million, or 94%, had been provided before 2013. That dated update also cited about 7.9 million driver licence numbers, 53,000 passport numbers and fewer than 100 monthly statements. Those historical figures are not a substitute for the category details on the company’s current response page. Read Latitude’s 27 March 2023 update.
Free tools Windows power users keep installed
One-click scans. No signup required.
What should you do if you may be affected?
Check your credit history and consider a credit ban
Check your credit reports for credit applications or accounts you do not recognise. Latitude lists these reporting agencies for people seeking a credit ban or suppression:
- Australia: Illion, Equifax and Experian.
- New Zealand: Illion, Equifax and Centrix.
Ask the agency for its current process and rules in your country before applying. A ban or suppression may help prevent someone using your details to apply for credit, but Latitude warns it can also make it harder for you to apply for credit while the restriction is active. The current agency instructions should explain the duration, renewal requirements and how to lift or amend a restriction.
Be alert to impersonation and phishing
Watch for unexpected messages or calls claiming to be from Latitude, a bank, a government agency or a credit provider. Latitude advises people to verify who contacted them, avoid suspicious links or texts, use strong unique passwords, and enable multifactor authentication where available. The company says it will not ask customers for passwords or sensitive information. If a message creates urgency or asks you to disclose credentials, contact the organisation through a channel you independently know is genuine.
Contact Latitude or get identity-support help
Latitude directs concerned people to its support teams and to IDCARE, which it describes as a free identity and cyber-support service. It says it provides extra help to people in uniquely vulnerable situations and will reimburse the cost of replacing stolen identity documents where needed. Contact Latitude to establish whether a replacement is necessary and how to seek reimbursement; the company’s wording does not mean every affected person automatically needs a new document. Use the current contact and support details on Latitude’s response page.
Recommended Free Tools
Has the investigation reached a conclusion?
No final finding was reported in the latest OAIC update located, dated 25 September 2026. The OAIC said its Commissioner-initiated investigation was continuing. The investigation includes questions about whether Latitude took reasonable steps to protect personal information and whether information it no longer needed was properly destroyed or de-identified; those are investigative questions, not established findings of wrongdoing.
Rank #4
- Wide Print Coverage: This identity theft protection roller stamp (overall size: 2.32 × 1.26 × 2.56 inches) comes with a 1.5-inch wide stamping pattern. Covers large private data areas quickly, blocking sensitive info to secure against identity theft
- 3 Refillable Ink: This ID defender roller stamp includes 3 ink refills. Just insert it into the side ink port and leave it upside down for 5 minutes to fully recharge the roller for repeated use
- Wide Application: This address blocker roller stamp easily covers addresses on mail, packages, envelopes, and other confidential documents, and hides sensitive details like names, account numbers on bills or receipts
- Efficient and Time Saving: Far easier than shredders or markers— this Id theft protection roller stamp saves you from tedious shredding or manual label removal
- Easy to Use: Simply roll the confidential roller stamp for quicker, cleaner privacy protection
Separately, the OAIC accepted a representative complaint in February 2024 on behalf of a group defined as current and former Latitude customers. The OAIC says a decision may affect members of that group and a determination could include compensation if warranted. The latest update does not report a final determination. The Australian and New Zealand regulators may reach separate outcomes. See the OAIC’s 25 September 2026 update.
The company and regulator sources cited here do not provide an independently measured total for identity fraud or consumer financial losses caused by the breach. Exposed-record totals alone do not establish how many people experienced downstream harm.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →
