Latitude [owner of 28 Degree MC] suffers Cyber attack, personal info stolen

Here is a fun one. Had a 28Deg Mastercard for many years and only used as a credit card when overseas and/or online if a foreign transaction fee was likely, but I noticed some fraudulent transactions on it in Feb 2023 using their existing Latitude online service portal with my existing login credentials, before all the recent news hit the headline. I called them and disputed the transactions (they were small but frequent transactions) and Latitude were very quick in admitting that the transactions were indeed fraudulent, and reversed the transactions for the last 12 months. So far no problem right?

Then the SHTF and that reminded/prompted me to close the account a few weeks ago, which they did very promptly and emailed me to say that I had to follow this link to download a Refund Form as my closed account was still in credit. Guess what? They want me to open a new Latitude ID and/or install the new Latitude App to do a refund request.

For some strange reason I'm not totally keen on giving them my new current email address, phone number and other data. :rolleyes:

I was tempted to ask them if they had ever heard of the works by Franz Kafka and Joseph Heller....

Instead I told them to find some other way of refunding me, otherwise the good folks at AFCA would be hearing about it.
 
Just found out I'm also one of the many impacted. Never bought via their finance at Harvey Norman etc or had the 28 Degree Card. Only thing I can think of at the moment is a credit card account I closed back in 2012.
 
Got the your data compromised email on Thursday, afternoon before Easter (the well known release time for bad news). Driver's licence "and other including..."(ie not limited to), so either they don't know everything that's been stolen, or not being fully open about it. So, I've decided to get a new driver's licence.
Anyone been able to get latitude to pay? Or even get them to advise the the process? I've phoned twice.
 
Got the your data compromised email on Thursday, afternoon before Easter (the well known release time for bad news). Driver's licence "and other including..."(ie not limited to), so either they don't know everything that's been stolen, or not being fully open about it. So, I've decided to get a new driver's licence.
Anyone been able to get latitude to pay? Or even get them to advise the the process? I've phoned twice.
It’s a bit convoluted, but one of the links in the email should take you to a page where they break down - by state - the arrangements for replacement documents.

In Victoria for example Latitude have already reached out to VicRoads, and VicRoads will contact all affected customers offering a new, free, driver licence.

Other states have different procedures.

The emails I’ve received so far have been pretty specific, and included the links to the replacement procedures, so if yours doesn’t, might be phishing email!

Anyway, the home page of l’attitude should get you the info you need.
 
My Lattitude 28 degrees card is being fraudulently used as I type this!

I just received a Text about one transaction (Officeworks - not me) and then looked to see that there are a few others today. The Text says contact Lattitude if not valid.

And a new one just popped up (Big W online - not me)!

I'm on hold now. Being after 6pm in the east coast, their regular line is closed. :(

So I'm trying their "Lost & Stolen Cards" number.

I do have a regular replacement new card on the way, apparently in the post since Easter. It might be that? But it's not activated.
 
Last edited:
30 mins on hold so far for the "Lost & Stolen Cards" number.

Not brilliant! :(

I suspect my card might be blocked already - but not sure. The Text about an Officeworks purchase did ask me to enter a code to confirm the purchase if it was valid.

Which I didn't of course.
 
Last edited:
30 mins on hold so far for the "Lost & Stolen Cards" number.

Not brilliant! :(

I suspect my card might be blocked already - but not sure. The Text about an Officeworks purchase did ask me to enter a code to confirm the purchase if it was valid.

Which I didn't of course.
ANZ is like that. I was getting text after text of unauthorised transactions and couldn't speak to anyone. $8000 in charges racked up before I could. About 6 weeks ago.
 
Have you blocked your card in the app?

Thanks! I see that option now.

But I've been using the desk top interface via www.28degreescard.com.au . And I just followed Lattitude's instructions in their Text message to call them. So I did.

I now see that you can block the card in the app! (not sure where or if it can be done in the www.28degreescard.com.au desk top version - but I can't find it!)

But Lattitude did answer my call a bit after an hour on hold and have apparently blocked the card for me.

In the app under Temporarily Lock Card it states "currently unavailable"...

There were about $700 of transactions that I didn't make. :(
 
Last edited:
Thanks! I see that option now.

But I've been using the desk top interface via www.28degreescard.com.au . And I just followed Lattitude's instructions in their Text message to call them. So I did.

I now see that you can block the card in the app! (not sure where or if it can be done in the www.28degreescard.com.au desk top version - but I can't find it!)

But Lattitude did answer my call a bit after an hour on hold and have apparently blocked the card for me.

In app under Temporarily Lock Card it states "currently unavailable"...

There were about $700 of transactions that I didn't make. :(
My worst one was $3200 at Bunnings online. Seriously. What did they buy?
 
Got the your data compromised email on Thursday, afternoon before Easter (the well known release time for bad news). Driver's licence "and other including..."(ie not limited to), so either they don't know everything that's been stolen, or not being fully open about it. So, I've decided to get a new driver's licence.
Anyone been able to get latitude to pay? Or even get them to advise the the process? I've phoned twice.
What answer did they give you on the phone regarding getting them to pay. It's almost been a month now. Useless coughs.
 

Coles credit card customers exposed in Latitude data breach​




In March 2018, Coles Financial Services moved its credit cards to Citibank. In June, National Australia Bank bought Citi’s Australian consumer bank, including Coles Mastercard portfolio.
 
What answer did they give you on the phone regarding getting them to pay. It's almost been a month now. Useless coughs.
1st they gave a web site to go to, turns out to be a charity site for scam victims; I feel I was scamed by latitude!

2nd ph call to them was told that there is no process for reimbursement set up yet, just wait for an email. Yeah right. Ask for more information and the head office number, was put on hold then cut off.

If this company folds it would be a good thing, our financial system would be more stable and secure (sorry shareholders but what were you thinking buying into an IPO floated by private equity!) Some comfort is that the previous CEO's options were out of the money when he went.
Useless coughs.
 
1st they gave a web site to go to, turns out to be a charity site for scam victims; I feel I was scamed by latitude!

Do you mean they referred you to IDCARE? IDCARE provided support people affected by the Optus, Medibank. Good guys, and tasmanian government breaches.
 
Do you mean they referred you to IDCARE? IDCARE provided support people affected by the Optus, Medibank. Good guys, and tasmanian government breaches.
Yes, I asked for latitude to reimburse driver's licence replacement costs, and they referred me to the idcare website (which according to the site is a not for profit scam help organisation). Idcare emailed me a general "what to do if you are scamed" reply.
I feel latitude is treating the data victims as a business inconvenience and a cost to be constrained.

28degrees/GE Money was a respectable business, amazing how sometimes ceo's are paid extraordinary salaries to destroy shareholder wealth.
 
Yes, I asked for latitude to reimburse driver's licence replacement costs, and they referred me to the idcare website (which according to the site is a not for profit scam help organisation). Idcare emailed me a general "what to do if you are scamed" reply.
I feel latitude is treating the data victims as a business inconvenience and a cost to be constrained.

28degrees/GE Money was a respectable business, amazing how sometimes ceo's are paid extraordinary salaries to destroy shareholder wealth.
This page is a bit hard to find but might be of use: Latitude Cyber Incident

Depends on your state but Latitude is paying for ID to be replaced if necessary. In QLD if it’s only your DL number that has been compromised you won’t need a replacement. If an image of your DL has been stolen Latitude will pay the cost for replacement.
 
This page is a bit hard to find but might be of use: Latitude Cyber Incident

Depends on your state but Latitude is paying for ID to be replaced if necessary. In QLD if it’s only your DL number that has been compromised you won’t need a replacement. If an image of your DL has been stolen Latitude will pay the cost for replacement.
So, how do you know if your DL number has been compromised? Latitude don’t seem to know.
 

Become an AFF member!

Join Australian Frequent Flyer (AFF) for free and unlock insider tips, exclusive deals, and global meetups with 65,000+ frequent flyers.

AFF members can also access our Frequent Flyer Training courses, and upgrade to Fast-track your way to expert traveller status and unlock even more exclusive discounts!

AFF forum abbreviations

Wondering about Y, J or any of the other abbreviations used on our forum?

Check out our guide to common AFF acronyms & abbreviations.
Back
Top