20 August 2025

iiNet has been impacted by a cyber incident involving unauthorised access to its order management system by an unknown third party.

The iiNet ordering system is used to create and track orders for iiNet services, such as NBN connections. The system contains limited personal information. Importantly, it does not contain copies or details of customer identity document details (such as passport or driver’s licences), credit card or banking information.

What we are doing

Upon confirmation of this incident on Saturday, 16 August 2025, we enacted our incident response plan, began work to ensure the security of the system and to determine what occurred. We have engaged external IT and cyber security experts to assist with our investigation.

We are making direct contact with affected customers to apologise and inform them of this incident, and to provide support and guidance on what to do next.

We are also liaising with the Australian Cyber Security Centre (ACSC), the National Office of Cyber Security (NOCS), the Office of the Australian Information Commissioner (OAIC) and other relevant authorities in response to this incident. 

As part of our efforts to protect the information of iiNet customers impacted by the incident, we have secured an interim injunction. This injunction prohibits any impacted data from being accessed, viewed, released, used, transmitted or published by anyone, including by any third parties. 

What personal information has been accessed in this incident?

Based on the current evidence from our forensic experts, it appears a list of email addresses and phone numbers was extracted from the iiNet system. The list contained around 280,000 active iiNet email addresses and around 20,000 active iiNet landline phone numbers, plus inactive email addresses and numbers. In addition, around 10,000 iiNet usernames, street addresses and phone numbers and around 1,700 modem set-up passwords, appear to have been accessed.

What should customers do?

iiNet urges our customers to remain vigilant, especially to any suspicious communications received via email, text or phone call. If in doubt, contact iiNet directly or seek independent advice from trusted sources, including the Australian Cyber Security Centre at cyber.gov.au.

We have set up a dedicated hotline at 1300 861 036 so customers can reach us if they have any concerns.

We will continue to share updates direct with customers, on our website and via the media and our social channels.

Frequently asked questions

What steps can I take to keep my information safe and secure after this incident?

  • Be alert to any unusual communications claiming to be from iiNet.
  • Reset the passwords for your online accounts where you have used the same password as this incident.
  • Always use strong, unique passwords for all your accounts including any financial services accounts and update them regularly.
  • Enable multi-factor authentication for your online accounts where possible, including your email, banking, and social media accounts.
  • Be cautious of emails or calls asking for personal information or passwords.
  • Do not share your personal information with anyone (unless you are confident about who you are sharing it with).
  • Ensure you have up-to-date anti-virus software installed on any device you use to access your online accounts.

How do I reset my iiNet password?

You can reset your iiNet password in a few simple steps. We have a password reset support page that walks you through how to create a new password for your iiNet account

What do I need to know about scam calls and phishing emails?

It’s possible that scammers will attempt to use the heightened awareness of this incident to entice iiNet customers to click through links or share personal details – so it’s important our customers remain alert and vigilant. 

Scam calls, texts and phishing emails are becoming increasingly sophisticated and can appear to come from legitimate email addresses or phone numbers with local area codes. They will also create a sense of urgency to try to get you to disclose sensitive information or to elicit funds from you. 

How can I identify a suspicious URL?

  • When on a webpage asking for your login credentials, take note of the web address or URL. The URL is located in the address bar of your web browser and typically starts with ‘https://’.
  • If you are suspicious of a URL, do not provide your login details. Contact the entity through the usual channels to ensure you are logging into the correct web page.
  • Keep in mind: we will never contact you to ask for your username or password.

I’m no longer an iiNet customer. Why was my information compromised?

The incident involved a system that contained historical customer records. While you may not be an iiNet customer anymore, some of your information remained stored due to legal, regulatory, or operational requirements.

I’ve been receiving scam calls and emails over the past few months. Is this related to the cyber incident?  

There are a number of scams affecting reputable Australian organisations that have been reported in recent months and were occurring before this incident. Some are cyclical based on the time of year. To our knowledge, these are unrelated to iiNet.  

How can I contact iiNet for support?

We have set up a dedicated hotline so customers can reach us if they have any concerns.

Call: 1300 861 036

Hours: Monday-Friday 8.30am-8.00pm and Saturday-Sunday 9.00am-5.00pm AEST

More resources

Additional resources on identity and cyber security support can be found here: 

Media release

Our media release responding to the cyber incident can be found online.  

 

The Wi-Fi Max and Wi-Fi Max 5G Modems include a built-in URL Blocking feature from the modem dashboard. This allows you to block access to specific websites directly from your browser, which can be useful for parental controls, productivity, or network security.

Important Notes:

  • URL blocking currently only works for links that are 36 characters or shorter. Longer URLs may not be blocked successfully. This limitation will be lifted in your first firmware update, which will increase the maximum supported URL length to 100 characters. 
  • This feature blocks websites accessed via a web browser, but may not block content accessed through mobile apps.
  • Some websites use multiple domains or subdomains. You may need to block more than one URL to fully restrict access.

How to Set Up URL Blocking

Follow these steps to block a website using your modem’s dashboard:

  1. Open your browser and type 192.168.1.1 into the address bar to access the modem dashboard.
  2. Log in using your Login Password.
    Note: If you haven’t changed them, the default Login Password found on the modem's barcode sticker.
  3. In the left pane, click on Network.
  4. Under the Firewall section, select URL Blocking.
    Wi-Fi Max 5G - URL Blocking

  5. By default, the Action dropdown should be set to Block. 
  6. In the URL field, enter the website address you want to block (e.g; youtube.com).
    Note: We recommend also adding the www. version of the URL to be successful. 
    Wi-Fi Max 5G - URL Blocking - Add URL
  7. Scroll to the bottom of the page and click Save Settings.

 

Tips for Effective Blocking

  • Use simple URLs: Stick to the main domain (e.g; facebook.com) rather than long or specific page links.
  • Test the block: After saving, try accessing the site from a browser to confirm it’s blocked.
  • Block related domains: Some services use multiple URLs (e.g; youtube.com, ytimg.com). Blocking all related domains may be necessary.

 

iiNet relies on nbn®’s infrastructure to deliver our nbn services. On occasion, this infrastructure may be affected by unplanned outages or maintenance which can subsequently affect the nbn service we deliver to you.

Before contacting us, we recommend checking your address for an nbn outage by following these steps:

  1. Visit https://www.nbnco.com.au/support/network-status
  2. Enter your full address and hit Check address.
    nbn Network Status address checker
  1. If your area is affected by an outage, we recommend that you check this page every few hours for updates. Two examples of an outage can be found below.
    Example unplanned outage
    nbn Network Status - Example unplanned outage
     
    Example network degradation
    nbn Network Status - Example network degradation
     

This is only available when using Smart Modem Gateway (VX420-G2H) on our nbn® services supplied before 13 August 2025.

Whenever your modem’s 4G light is lit, that means your modem has automatically connected to the 4G Backup service because your nbn service is unavailable, such as during initial setup or network maintenance.

Your nbn Phone will not work while 4G Backup is in use.

 

Once you're connected to nbn, if you notice the 4G Backup service has turned back on for an extended period of time:

  • Restart your modem.
  • Make sure your modem is plugged in correctly for nbn.
  • Contact us if the issue persists as we may need to investigate.
Smart Modem Gateway lights, from left to right: Power, DSL, 4G, Internet, 2.4GHz, 5GHz, WAN, LAN 1, LAN 2, LAN 3, LAN 4, Phone, WPS, USB.

 

Terms & Conditions

  • 4G Backup is a complimentary service that provides an interim internet connection using our 4G mobile network. 
  • 4G Backup is only available; 
    • In select 4G Network coverage areas. 
    • Using our Smart Modem Gateway with an embedded 4G-capable SIM card (this SIM must not be removed from the modem). 
    • When supplied with a compatible iiNet nbn® broadband plan. 
  • Subject to availability, you will be able to use 4G Backup; 
    • Once you have received your Smart Modem Gateway, until your nbn® service is fully activated or for a period of 30 consecutive days (whichever occurs first). 
    • If you lose connection to iiNet nbn® broadband during confirmed local nbn® faults (excluding mass nbn® outages). This is until the fault is resolved or for a period of 30 consecutive days (whichever occurs first). If we seek your co-operation in restoring your iiNet nbn® Service and are unable to obtain it then we may temporarily bar or restrict the 4G Backup service until we successfully contact you. 
  • Maximum speeds of 12/1Mbps apply to your 4G Backup service. Service performance varies depending on network coverage and your location, with speeds likely less than the maximum. 
  • Our Acceptable Use Policy applies. 

The iiNet Wi-Fi Max modem has a Mobile Backup feature, which helps keep you connected even if your main internet connection goes down.

You can set up up to 3 mobile devices (like smartphones or tablets) to act as backup internet sources. Here's how it works:

  1. Connection Drops: If your regular internet stops working for any reason.
  2. Mobile Backup Kicks In: You simply turn on the personal hotspot on one of your pre-configured mobile devices.
  3. Automatic Switch: Your modem will detect the hotspot and automatically switch to using your mobile data to keep your home or office online.

This means no interruptions to your work, streaming, or browsing—even during an outage.

 

Select one of the links below to jump to a query:

 

From the My Internet Connect App

  1. Open the App on your device.
  2. Tap on the settings icon.
  3. Under Network Management, select Mobile Backup.
  4. Switch the Mobile Backup toggle to the on position. 
  5. Select Add a backup network. You’ll get the option to Search For Nearby Network.
    You'll see a prompt asking you to enable your personal hotspot.
  6. Choose your personal hotspot from the list and enter the password.
  7. Tap the checkmark at the top of the screen to save your settings.

 

    From the Modem Dashboard

    1. Open your web browser and go to 192.168.1.1.
    2. Log in with the default password found on the modem's barcode sticker or use your custom password.
    3. From the left pane, click Network.
    4. Under WAN, select Backup WAN.
      Wi-Fi-Max - Backup WAN
    5. Check the Backup WAN Enable tickbox
    6. Enter your mobile Hotspot Name in the Wi-Fi name 1 field.
    7. Enter your mobile Hotspot Password in the Wi-Fi Password 1 field.
    8. Hit Save Settings.
      Wi-Fi-Max - Enable Backup WAN

     

    Enabling your personal hotspot on your mobile devices

    Samsung (Android)

    • Go to the Settings.
    • Tap on Connections > Mobile Hotspot and Tethering
    • Tap Mobile Hotspot and toggle it ON.
    • Tap Configure to set network name, password, and band.

    Google (Android)

    • Go to the Settings.
    • Tap Network & Internet > Hotspot & tethering.
    • Tap Wi-Fi hotspot.
    • Toggle it ON and configure the hotspot name and password.


    iPhone (iOS)

    • Go to Settings.
    • Tap Personal Hotspot (or Cellular > Personal Hotspot).
    • Toggle Allow Others to Join to ON.
    • Set or view the Wi-Fi password

    OPPO (ColorOS)

    • Go to Settings.
    • Tap Connection & sharing > Personal hotspot.
    • Toggle Personal hotspot to ON.
    • Tap Personal hotspot settings to configure SSID and password.

     

    Having trouble with the Mobile Backup feature?

    If you're experiencing issues while using Mobile Backup feature, it might help to temporarily turn off your Wi-Fi connection. Mobile Backup is designed to work over your mobile data network, and having Wi-Fi enabled can sometimes interfere with the process—especially if the Wi-Fi signal is weak or unstable.

    Here’s how to turn off Wi-Fi:

    1. Open your phone’s settings.
    2. Tap on Wi-Fi.
    3. Toggle the switch to turn Wi-Fi off.
    4. Once Wi-Fi is off, Mobile Backup will use your mobile data connection, which can often provide a more stable and reliable experience.

     

    Select your modem

    Wi-fI Max 5G
    iiNet Wi-Fi Max 5G (5FWA2025)
    Smart Modem Gateway VX420-G2H
    Smart Home Gateway (VX420-G2H)

    Wi-Fi Max 5G (5FWA2025)

    You can only do this on the My Internet Connect App (Android / iOS).

    1. Open the App on your device.
    2. Go to Settings.
    3. Under User Management, select Parental Control.
    4. Select Add New Schedule.
    5. Select the User(s) or Device(s) you want to control.
    6. Enter a Schedule Name and then set the Schedule Time and Days.
    7. Tap Save at the top of the screen then OK.
      Note: You can pause/resume a Schedule at any time by toggling the switch on/off.
      Wi-Fi Max - Parental Controls - App Only

     

    Smart Home Gateway (VX420-G2H)

    Parental Controls on the Smart Home Gateway modem has two parts – Device Control and Content Control.

    1. Open your web browser and go to:192.168.1.1
    2. Log in with the default password found on the on your modem's barcode sticker.. If you have a custom password, use that instead.
      Can't log in? Factory reset with the reset button instead.
    3. Hit Parental Controls.
    4. Set the Parental Controls toggle to On, then click Add.
      SMG Parental Controls - Add
       
      • Select View Existing Devices, then under Operation, click the plus icon (+) next to the devices you want to restrict.
      • Select the clock icon beside Effective Time and click and drag to highlight the days and hours. Once done, click OK.
      • Enter a Description, then click OK.
    5. Set the Content Restriction toggle to On.
      • If you want to restrict all access or only allow a few websites, select Whitelist and click the plus icon (+) next to Add a New Keyword. Don’t add keywords if you want everything restricted.
      • If you only want to restrict a few websites, select Blacklist and click the plus icon (+) next to Add a New Keyword.
    6. Click Save.

     

    The article will explain the status lights found on the Wi-Fi Max Modem, which may be useful during setup and troubleshooting.

    On the front of the modem is a quick reference light. This allows you to quickly see if the modem is working as expected or if there are issues you need to address. There are additional lights on the back of the modem.

    Light State Meaning
    Front Off Modem has no power or isn't turned on.
    Solid or Flashing Orange Modem is powering up & connecting.
    Solid Green Modem is connected.
    Flashing Green Session is down.
    Solid Red Modem is unable to connect.
    Flashing Red Modem has no connection to ISP.
    Solid Blue Mobile connection via Bluetooth is active.
    Flashing Blue Phone is off the hook.
    Rear Top
    Bluetooth / WPS Connectivity
    Off No Bluetooth or WPS connection request in progress.
    Solid Blue Bluetooth connection is active.
    Flashing Blue Bluetooth connection in progress.
    Solid Green WPS connection is active.
    Flashing Green WPS connection in progress.
    Flashing Orange Bluetooth or WPS connection failed.
    Rear Middle
    Internet
    Solid Green

    Modem is connected.

    Flashing Green Session is down.
    Solid Red Modem is unable to connect.
    Flashing Red Modem has no connection to ISP.
    Rear Bottom
    Phone
    Off No Phone service has been activated.
    Solid Green Phone successfully registered.
    Flashing Green Phone service initial setup in progress.
    Solid Blue Phone service initial setup failed.
    Flashing Blue Phone is off the hook.

     

    Here's what the status lights mean on your Wi-Fi Max 5G Modem, which was supplied from July 2025 onwards.

    On the front of the modem is a quick reference light. This allows you to quickly see if the modem is working as expected or if there are issues you need to address. There are additional lights on the back of the modem.

    Light State Meaning
    Front Off Modem has no power or isn't turned on.
    Flashing or Solid Green Modem is powering up & connecting.
    Solid Blue Modem is connected to 5G.
    Flashing Blue Modem is connected to 5G, but no connection to ISP.
    Solid Orange Modem is connected for 4G.
    Flashing Orange Modem is connected to 4G , but no connection to ISP.
    Solid Green Connected to the internet (nbn ore other service).
    Flashing Green Connected to the internet (nbn ore other service), but no connection to ISP.
    Solid Red Unable to connect.
    Rear Top
    Bluetooth / WPS Connectivity
    Off No Bluetooth or WPS connection request in progress.
    Solid Blue Bluetooth connection is active.
    Flashing Blue Bluetooth connection in progress.
    Solid Green WPS connection is active.
    Flashing Green WPS connection in progress.
    Flashing Orange Bluetooth or WPS connection failed.
    Rear Bottom
    Internet
    Solid Blue Modem is connected to 5G.
    Flashing Blue Modem is connected to 5G, but no connection to ISP.
    Solid Orange Modem is connected for 4G.
    Flashing Orange Modem is connected to 4G , but no connection to ISP.
    Solid Green Modem is connected to the internet (nbn ore other service).
    Flashing Green Modem is connected to the internet (nbn ore other service), but no connection to ISP.
    Solid Red Unable to connect.

     

    Here’s how you can set up a compatible bring-your-own (BYO) modem for iiNet FTTH on the Opticomm or RedTrain network.

    Your Netphone service and included calls are not available if you use a BYO modem.

    Select one of the links below to jump to a query:

    Modem compatibility

    To work on iiNet FTTH, your modem must support the following:

    • PPPoE connections by Ethernet WAN
    • IPoE connections by Ethernet WAN (for select locations on the RedTrain network)

    Not sure if your FTTH service is on the Opticomm or RedTrain network? Call us on 13 22 58 and we'll help you.

     

    General FTTH setup guide for any modem

    All modems are different. If this advice doesn’t work for your modem, check the manufacturer’s website for a guide on how to plug in and enter the iiNet settings.

    1. Find your FTTH Connection Box – this is usually installed on the inside of an exterior wall in your home, sometimes in the garage. Some older installations may be in a cabinet on an outside wall. Unplug any old modem from the Connection Box and power outlet.
      Examples of connection boxes can be found here.
    2. Use an Ethernet cable to connect your modem's WAN or LAN/WAN port to the LAN1 or Ethernet 1 port on your Connection Box.
    3. Use the power cable to connect your modem's Power port to a power outlet, then turn it on.
      If your modem has a power button or switch, turn it on.
      FTTH modem plugin example
    4. Connect a device to your modem. You can use an Ethernet cable to connect a device to one of the LAN or Ethernet ports, or connect via WiFi.
      The default WiFi name (SSID) and password can be found on your modem’s barcode sticker.
      Barcode sticker example - WiFi details
    5. On your connected device, open your web browser and go to your modem’s gateway address (e.g. http://192.168.1.1). The gateway address and login details can be found on the barcode sticker
      Modems may have a login username and password, or just a password.
      Barcode sticker example - Admin login details
    6. Make sure your modem has the following settings. If you’re not sure how to do this, check the manufacturer’s website for a guide.
       
      Mode/Modulation: WAN
      Connection Type: PPPoE*

      *Select locations on the RedTrain network need to use IPoE. If you're not sure if this applies to you, call us on 13 22 58 and we'll help you.
    7. You’ll need to enter your iiNet username and password for the PPPoE connection. Your username is in emails from us about your iiNet order, and on your iiNet  invoice.
      If you forgot your password, you can reset it.
    8. Save your settings and wait 5-10 minutes for your modem to connect.
    9. You should now be online. If you can’t view a website or notice a red or unlit Internet light on your modem, call us on 13 22 58 for help.
      We’re fully trained on iiNet modems, but please note that there may be limited support for your BYO modem.
      Modem LED example - Internet light

     

    FTTH Connection Box examples

    ALLOPTIC home 4000

    ALLOPTIC home 4000

    NEC ME200

    NEC ME200

    Huawei HG8247

    Huawei HG8247

    Dasan H690R

    Dasan H690R

    You may have received a notice about moving to a new plan for your iiNet service.

    Due to a number of factors, including recent changes in wholesale pricing, we've updated the pricing on some of our current plans.

    We’re working to move all iiNet customers onto these current plans to provide a better experience for our customers. This simplification also helps us focus on more important aspects of delivering your service.

     

    Select one of the links below to jump to a query:

     

    When will my plan change?

    This depends on the service you have and when you signed up.


    NBN: Plan changes will happen automatically in the month advised in your initial notice. We will send notices at least 30 days before the change.

    Fibre to the Home: If you signed up after 30 April 2025,your plan’s price will automatically change when your plan renews after 4 June 2025. If you signed up before 30 April 2025: Plan changes will happen automatically in the month advised in your initial notice. We will send notices at least 30 days before the change.

    Note: If you have multiple iiNet services affected by this change, you’ll get one notice per service. It’s not possible to complete your scheduled plan change sooner – please wait for it to happen automatically.

     

    How will plans change?

    • The monthly price of your plan may increase, decrease, or stay the same (after any applicable discounts).
    • Your internet speed may change.
    • Your monthly internet data may change to unlimited data.
    • If you have a phone plan, any monthly included call value may change to Pay as You Go phone calls. Your new phone plan may have new optional add-on Call packs available.
    • If you have a phone plan with add-on Call Pack(s), you may move to a new add-on Call Pack with a different price and included call value.
    • Your plan name will be to the name of your new plan.
    • Your username and any phone numbers linked to your internet service will stay the same.
    • For all affected phone plans, call rates will stay the same but your inclusions may have changed.

     

    Can I change my internet plan?

    We’ve chosen your new plan based on the price and features of your old plan. If you’d prefer a different plan, you can switch to any of our current plans in Toolbox (if applicable) or by calling us on 13 22 58.

    Important: If you change your plan, your scheduled plan change will not happen and the plan we’ve selected for you may not be available later.

     

    Can I change the add-on Call Pack on my phone plan?

    Once you’re on your new phone plan, you can add, switch, or remove an add-on Call Pack in Toolbox.

     

    What happens if I cancel my plan?

    To cancel your iiNet plan, please call us on 13 22 58. You won’t be charged a cancellation fee.

     

    More information

    If you have any questions about this change, please call us on 13 22 58 and we’ll be happy to help.

    For full Terms & Conditions, see your internet plan’s Service Description at:https://www.iinet.net.au/about-us/legal/cra.