MELBOURNE (Reuters) - Singapore Telecommunications said on Monday it was assessing the potential costs of the massive cybersecurity breach at its Optus arm, Australia's second-largest telco, 12 days ago.
In its second comment on the breach of private data from 10 million accounts, Singtel sought to clarify reports it could face a huge compensation bill.
It said it has not received any legal notice of a class action lawsuit but has engaged lawyers to advise it.
"Any class action will be vigorously defended, if commenced," Singtel said in a statement.
The Australian government has blamed Optus for the breach, which affected the equivalent of 40% of Australia's population, saying customers were exposed to financial crime and pressing the company to do more to notify those affected.
Last week, an unidentified person posted online that they had released personal details of 10,000 Optus customers. The government urged customers who have been notified of that breach to cancel passports and other identification documents that may have been exposed.
"Singtel is continuing to evaluate the potential financial implications arising from this matter and any material development will be disclosed to the market on a timely basis," the company said.
At least two major law firms, Slater & Gordon and Maurice Blackburn, have said they are investigating a possible class action against Optus to claim compensation for people affected by the breach.
Optus on Monday said it had appointed Deloitte to run an independent external review of the cyberattack and the company's security systems, controls and processes.
"While our overwhelming focus remains on protecting our customers and minimising the harm that might come from the theft of their information, we are determined to find out what went wrong," Optus Chief Executive Officer Kelly Bayer Rosmarin said in a statement released by Singtel.
The company said during the weekend it is also working closely with federal and state government agencies.
(Reporting by Sonali Paul. Editing by Gerry Doyle)