Operation Guardian was launched to ensure an effective and collaborative approach to protecting Optus customers who may be affected by the Optus data breach.
Following the recent Medibank data breach, the AFP has expanded Operation Guardian to protect Medibank Private customers whose personal information has been unlawfully released online by ransomware criminals.
What will Operation Guardian seek to achieve?
“Operation Guardian will be actively monitoring the clear, dark and deep web for the sale and distribution of Medibank Private and Optus data”, said AFP Assistant Commissioner Cyber Command Justine Gough.
Various measures will be taken, including covert techniques, to identify to those who are buying or selling personal identification information. Investigators within the AFP’s Cyber Command are working with public and private sector agencies to scour the internet and known criminal online sites.
A message to would-be offenders
On 8 November 2022, a Sydney man pleaded guilty to trying to blackmail Optus customers after he was charged by the AFP.
“Blackmail is an offence and those who misuse stolen personal information for financial gain face a penalty of up to 10 years’ imprisonment”, said Assistant Commissioner Gough.
It is also an offence to buy stolen information online, which could be used to commit financial crimes. Buying stolen information could include a penalty of up to 10 years’ imprisonment.
It is therefore not only the cybercriminals who originally stole the data who face investigation and prosecution by law enforcement, but also any would-be offenders who may attempt to piggyback off the actions of these criminals.
The borderless nature of cybercrime
“This is not just an attack on an Australian business. Law enforcement agencies across the globe know this a crime type that is borderless and requires evidence and capabilities to be shared”, said Assistant Commissioner Gough.
In addition to working with Commonwealth agencies, the AFP is also working with Five Eyes Law Enforcement partners, including the FBI.
Key takeaways
The AFP has expanded Operation Guardian to protect Medibank Private customers in addition to Optus customers. International and domestic law enforcement cooperation is being leveraged to identify anyone buying or selling personal identification information online.
