Responsible Disclosure at Westpac
Our approach
Westpac takes the protection of its customer information and confidential information very seriously.
We have rigorous security measures in place that protect the privacy and confidentiality of our customers, including industry best practice security and fraud detection techniques.
We also constantly monitor the environment for emerging cyber threats, security issues and potential vulnerabilities across the Westpac Group.
Our customers and others outside the organisation play an important role in providing us with information that supports our continuous efforts to keep our customers’ information safe and secure.
What to do if you receive a phishing or hoax email or SMS?
Customers may receive phishing or hoax emails, SMS or other correspondence from third-parties that may seek to impersonate our brand for the purposes of extracting information, or money from customers. If you have received a hoax or phishing email or SMS, forward it through to hoax@westpac.com.au, SMS it to 0497 132 032. Please visit the Fraud and Scams page to read more.
What to do if you have other information relating to potential security threats or issues?
We welcome any information you have on suspected cyber threats, or security issues. If you would like to report a suspected cyber threat, security issue or vulnerability, please send an email with the information to: vulnerability@westpac.com.au. When making your report, please include as much detail as possible to assist us.
To help us to action your concerns outlined in your report, we recommend you follow our Submission Guidelines outlined below.
Please include the following information in your report:
- Your name and contact information (optional).
- Date and time the suspected security issue or vulnerability was discovered.
- IP address used when the suspected security issue or vulnerability was discovered.
- A detailed description of the suspected security issue.
- Vulnerable URL/application.
- Vulnerable parameter (if applicable).
- Step-by-step instructions to reproduce the vulnerability.
What happens next?
We will firstly assess the report, based on any potential risks that it poses to Westpac or its customers. If you choose to share your name and contact details, we will contact you within a reasonable time to acknowledge we’ve received your report, and to discuss how we intend to resolve the issue.
Westpac appreciates your assistance in reporting suspected cyber threats, security issues and vulnerabilities. However, there are circumstances where we will not investigate all reported suspected cyber threats and security issues.
Privacy Statement
Our Privacy Statement explains how we collect, use and disclose your personal information and credit-related information. Our Privacy Statement also provides information about how you can access and correct your personal information and make a complaint. You can read our Privacy Statement online or by calling us on 132 032.