OPTUS has confirmed that 2.1 million customers have had a personal identity document exposed from the recent cyber attack.

Following investigations, CEO Kelly Bayer Rosmarin revealed 1.2 million customers have had at least one number from a current and valid form of ID compromised.

An additional 900,000 customers have had a number related to an expired ID compromised.

Optus now says 7.7 million customers of the 9.8 million believed to have had their data accessed will not have to take action.

While Bayer Rosmarin said the numbers have come down, she said the telco provider is still “disappointed that even one customer’s information could be accessed” and that they are “deeply, deeply sorry that this could occur.”

“For the 1.2 million customers where action should be taken and is advised, all of those customers have been reached out to and already know that they are in the position to take action,” she said.

Bayer Rosmarin said Optus was awaiting confirmation from licensing authorities about whether action will need to be taken for the 900,000 customers who have had numbers related to expired IDs exposed.

The telco provider has commissioned consulting company Deloitte to conduct an independent external review of the cyber attack.

As part of the review, Deloitte will undertake a forensic assessment and examine Optus’ security systems, controls and processes.

ACT residents who have been deemed most at risk of identity theft or fraud due to the Optus data breach will receive a new driver licence card for free.

News all day, every day at CityNews.com.au.