Your security is our priority. We use the latest technology to better protect your MyServiceNSW Account and identity information from cyber criminals.
What's a leaked password
A leaked password refers to a password that is no longer secure and secret.
It means your password and email address combination was found in a third-party data leak and may be compromised.
When we find leaked passwords
Each time you log in to your account, we check the dark web for leaked email address and password combinations.
Your information is protected and not disclosed to anyone during this security check.
Change your password if prompted
Logging into your account
If your email address and password combination is found in a data leak when you log in, we’ll prompt you in your account to change your password.
We will also send you an email. Emails from Service NSW will never link directly to a login page.
Note: There are some notifications or messages you cannot opt out of getting. For example, when the notification is relevant to the privacy or security of your personal information.
Set up multi-factor authentication
Secure your account by setting up multi-factor authentication.
MFA will soon be required for all MyServiceNSW Accounts.
Service NSW has not leaked passwords
Service NSW is not responsible for leaking email address and password combinations to the dark web.
We have measures in place to ensure our systems and customer information are secure. If a data breach or cyber attack were to occur, we would work closely with Cyber Security NSW, ID Support NSW and other partners to directly notify and support any customers affected.
Source or cause of leaked passwords
We cannot identify how email address and password combinations were leaked.
Causes may include a security incident by another company. Details of publicly known incidents may also be available at Have I Been Pwned. Enter your email address or phone number to find out if you have been implicated in a known breach.
Other causes may include using a computer or phone secretly infected with a virus or malware (malicious software), or logging into a website that looks genuine but is fraudulent. Find practical guidance on protecting your devices.
Keep your password secure
We cannot guarantee all leaked email and password combinations will be found. We encourage you to change your password regularly as a precaution.
Other accounts like banking, email, utilities and social media
If you use the same email address and password combination for other accounts, change your password to keep these accounts secure. Avoid using the same password on multiple online accounts.
Support
If you need help, call us on 13 77 88 or go to a service centre.
If you need help keeping your identity and personal information safe, go to ID Support NSW or call 1800 001 040.