Tangerine - 243,462 breached accounts

In February 2024, the Australian Telco Tangerine suffered a data breach that exposed over 200k customer records. Attributed to a legacy customer database, the data included physical and email addresses, names, phone numbers and dates of birth. Whilst the Tangerine login process involves sending a one-time password after entering an email address and phone number, it previously used a traditional password which was also exposed as a bcrypt hash.

accounts address addresses australian breach breached customer data database data breach email exposed february february 2024 legacy login names numbers password phone phone number phone numbers physical process records tangerine telco the australian