Privacy breach: Hundreds of ActewAGL power bills mailed across Canberra
A major privacy breach has engulfed ActewAGL and Icon Water, after more than 1000 personally addressed utility bills were sent in bundles to at least eight separate households.
The bills were bundled by postcode and then, for reasons that remain unclear, were sent in boxes and envelopes addressed to specific customers.
Customers have had their personal information sent to addresses in Belconnen, Gungahlin, Chisholm, Calwell, Kingston and Wanniassa, as well as a city post box.
The Canberra Times is aware of eight separate incidents, including bills being sent to Belconnen resident John Steep, who received an envelope containing hundreds of them on Wednesday.
On Thursday, seven more people came forward with similar stories.
ActewAGL initially told one recipient to return the bundle to sender by regular post.
The utility provider has now told recipients of the bundles to wait for them to be collected by ActewAGL representatives.
The company told another recipient it would not collect the bills on Thursday due to wet weather affecting road safety.
Mr Steep, who contacted ActewAGL to return the bundle of documents he received at his Belconnen home on Wednesday, said the almost half-ream of outstanding bills had not been collected as of Thursday afternoon.
ActewAGL told Mr Steep on Thursday morning it had sent people out to collect the bills at 6.45pm on Wednesday, right after Mr Steep and his wife had gone out for a walk.
He was told that they arrived in the evening to collect the bills because the ActewAGL representatives had other things to do first.
An ActewAGL staff member also told Mr Steep that the utility provider was unlikely to send anyone to retrieve the bills on Thursday due to safety concerns about driving in the rain and on wet roads.
"I'm stunned. It suddenly becomes my problem. It's not funny any more," Mr Steep said.
A bundle of about 20 bills addressed to ActewAGL customers in Kingston was also delivered to an employee of The Canberra Times on Wednesday, but was not found until Thursday morning.
2CC program director Peter Davidson received a bundle of about 150 Icon Water bills on Wednesday, addressed to homes in Gunghalin and Belconnen.
Belconnen resident Samantha Simms received a box containing more than 500 ActewAGL electricity bills sometime between 5.30 and 7pm on Wednesday.
"It was really concerning. I was glad my bill was the one in the envelope [attached to the box]," she said.
A resident in Chisholm was sent a box containing between 200 and 300 outstanding gas bills addressed to customers in Chisholm and Calwell.
A Calwell resident received an envelope that contained 13 Icon Water bills on Thursday.
Jacquelyn Lamont of Waniassa received an A4 envelope with seven electricity bills on Wednesday, including her own. ActewAGL told her they would send someone over to collect them.
The six other bills were all addressed to houses within the 2903 postcode.
"They didn't seem too concerned," Ms Lamont said. "I'm so annoyed with them."
An envelope containing 19 electricity bills was also sent to a post box at the Canberra general post office, which included bills addressed to post office boxes in Braddon, the city and Belconnen.
The large bundles had the recipients' bills in an envelope taped to the outside of the larger package.
The bills in Mr Steep's bundle were addressed to ActewAGL customers in the 2617 postcode, which covers the suburbs of Belconnen, Kaleen, Giralang, Evatt, McKellar, Bruce and Lawson.
Several bills were addressed to houses on Mr Streep's street and other nearby homes.
The bills contained names and addresses of ActewAGL customers, unique reference numbers and show how much gas the customer were using. In some cases, it could have been possible to determine from the bill if a person was receiving a pension.
ActewAGL supplies gas to around 150,000 customers in the ACT.
Mr Steep contacted ActewAGL about the mistaken delivery just before midday on Wednesday.
"I didn't want to look like I was sitting on it," he said.
Mr Steep was initially told at 1.20pm on Wednesday that two representatives from the utility provider would collect the cache of bills within about an hour.
"I'm just cranky that I've wasted a day on this," Mr Steep said.
Mr Davidson rang Icon Water at 4.30pm on Wednesday and was told to return the bills to sender. At 10am on Thursday, he contacted the water provider again and was told someone would be sent out to collect them but no collection time had been arranged.
"The guy on the other end was pretty blasé about the whole thing," Mr Davidson said.
A spokeswoman for ActewAGL said on Wednesday that the company was aware of the mailout error.
"[This] has resulted in invoices that we prepare for ActewAGL and Icon Water customers being received in sealed envelopes by someone other than the intended recipient," she said.
ActewAGL said it had put on hold mail being handled by an external provider after it was notified of the mistake.
"We are investigating the matter in accordance with our internal procedures, which reflect the guidelines publicly issued by the Privacy Commissioner’s office," the spokeswoman said.
The company confirmed on Thursday that it had begun contacting affected customers and would extend bill payment times. The utility provider said it had also alerted the Privacy Commissioner's office.
Agencies subject to the Privacy Act, which include ActewAGL, must take reasonable steps to prevent misuse, interference or loss of any personal information they hold.
"We apologise for any inconvenience or concern caused," a company spokeswoman said.
Icon Water said ActewAGL managed billing processes for the water provider and that it was aware of the issue and working closely with ActewAGL to investigate the mail out error.
"Our customers’ privacy is of the utmost importance. Distribution of bills was suspended as soon as the issue was identified," the company said in a statement.
The Australian Competition and Consumer Commission's Scamwatch website advises people to lock their mailboxes and destroy any documents containing personal information before disposing of them.
Scammers can use private information obtained through discarded personal documents, including utility bills, to commit identity theft.