Historic telecommunications cyber catastrophe. An unauthenticated API gateway configuration allowed automated scraping of Optus customer records. 9.8M accounts breached, including names, DOBs, and addresses. 2.1M users had active driver's licence and passport numbers stolen, triggering a massive national identity re-issuing campaign and class-action litigation.