https://www.abc.net.au/news/2025-07-24/mercer-super-security-breach-theft-australia-post/105565592
Mercer Super and Virgin Money Super members have become victims of an unusual security breach after thieves targeted Australia Post’s Melbourne General Post Office between July 1 and 17, 2025. The incident affected members who posted mail to Mercer Super’s Melbourne GPO Box Centre located at 380 Bourke Street during this period, with the superannuation fund confirming that letters containing personal and financial information may have been stolen during multiple break-ins at the facility.
The burglaries occurred between July 6 and 17 from post office boxes in the Melbourne GPO on Bourke Street, representing what is being called an “analog data breach” in an increasingly digital world. Unlike typical cybersecurity incidents that involve online systems, this breach involved physical theft of traditional mail correspondence. Mercer Super has acknowledged that it does not know the exact number of members affected by the incident, as the scope depends on how many customers sent mail to the compromised location during the specified timeframe.
The incident highlights vulnerabilities in traditional mail systems that remain critical for financial services communications. Both Mercer Super and Virgin Money Super have notified potentially affected members and established FAQ resources to address customer concerns. The companies have advised members who posted mail to the Melbourne GPO during the affected period to monitor their accounts closely and have implemented additional security measures in response to the breach. Australia Post is cooperating with authorities in the ongoing investigation into the theft.