Sumo has over 118,000 residential and business customers across Queensland, New South Wales, Victoria and South Australia and takes data security very seriously. The recent Australian Energy Regulator (AER) press release relates to an incident between the 23rd February 2024 and 13th May 2024.  The Office of the Australian Information Commissioner (OAIC) investigated the incident and closed their investigation in August 2024. Over the past 2+ years we have continued to provide the AER with all the relevant information for their investigation, including the specific 21 affected customers from QLD and NSW.

Important information to know:

• • All impacted customers at the time, including the affected customers, were swiftly contacted by Sumo.
• • No threat or demand has been made by any party at any time in relation to the potentially compromised data.
• • No customers have notified Sumo of any threat or other impacts.
• • No existing Sumo customer is among the 21 affected customers.
• • At no time have any customers' personal bank accounts, credit cards or payment methods ever been impacted.

At Sumo, our staff and customers are of the highest importance to us. As part of our continual improvement and quality assurance initiatives, Sumo is always actively reviewing, strengthening and advancing our security measures.

Should you have any further questions, or you are one of the previous 21 affected customers and would like to discuss any of this further, you are welcome to contact us.

Please reach out via email:  dataincident2024@sumo.au