Skip to main contentSkip to navigationSkip to navigation
Australia’s Commonwealth Bank
Australia’s Commonwealth Bank admits it lost backup data on tape. Photograph: Dave Hunt/EPA
Australia’s Commonwealth Bank admits it lost backup data on tape. Photograph: Dave Hunt/EPA

Commonwealth Bank admits it lost backup data for 20m accounts

This article is more than 5 years old

The bank, one of the Australia’s big four, assures customers the information has not been compromised

Sign up to receive the top stories from Guardian Australia every morning

The Commonwealth Bank is reportedly facing renewed investigations after admitting it lost backup data on tape for more than 15 years of customer statements in 2016, affecting almost 20 million accounts.

The CBA’s acting group executive for retail banking services, Angus Sullivan, issued a video statement on YouTube after BuzzFeed Australia published an article about the incident on Wednesday.

Sullivan assured customers their information had not been compromised and no action was required.

“The tapes did not contain PINs, passwords or other data that could enable account fraud,” he said.

Sign up to receive the top stories from Guardian Australia every morning

The bank said it had confirmed there was no evidence of suspicious activity involving the 19.8 m accounts affected following the incident.

CBA said it had been unable to confirm the destruction of two magnetic tapes containing historical customer statements.

The tapes contained customer names, addresses, account numbers and transaction details from 2000 to early 2016.

An investigation in 2016, when the incident occurred, determined it was most likely the tapes had been disposed of and the bank immediately put mechanisms in place to further protect customers.

“We take the protection of customer data very seriously and incidents like this are not acceptable,” Sullivan said.

“I want to assure our customers that we have taken the steps necessary to protect their information and we apologise for any concern this incident may cause.”

He added that the relevant regulators were informed in 2016 but that the bank had decided it was not necessary to alert customers after discussion with the Office of the Australian Information Commissioner (OAIC).

However, BuzzFeed reports the OAIC is now making further inquiries into the incident, following a report by the banking regulator that slammed the bank for its “widespread sense of complacency”.

The Australian Prudential Regulation Authority said on Tuesday that community trust in Australia’s banks had been “badly eroded” and CBA had failed to meet expectations and “fallen from grace”.

Most viewed

Most viewed