Control failures caused Telstra outage, CEO Brady tells Senate
Telstra's chief executive told a Senate inquiry that basic IT control failures caused a severe network outage, highlighting persistent operational fragility in Australia's critical telecom infrastructure.
Telstra CEO Vicki Brady testified on Friday that last week's severe network outage was triggered by an undocumented design change and a missed software patch on a network time-keeping device. During routine maintenance on the timing and synchronisation equipment, the system reset its date to 2006. This caused authentication certificates to fail across the entirety of Telstra's network, crippling both voice and data transmission.
The collapse of these core services had immediate, tangible impacts on the broader economy. Phone services were cut for thousands of customers, while wireless payment networks were severely disrupted. Most critically for regulators and the public, the outage halted train networks and interrupted calls to the Triple Zero emergency line, elevating the incident from a corporate IT issue to a matter of public safety.
For market professionals, the root cause of the disruption is likely to raise fresh questions about operational risk and internal controls at Australia's largest telecoms firm. The failure was not the result of a sophisticated cyberattack, but rather a basic breakdown in engineering governance. A prior fix to the device was intentionally implemented but never formally documented. Consequently, the maintenance team executing the restart had no visibility into how the equipment would behave.
Brady indicated that the company will overhaul its risk management framework to prevent a recurrence. "Our investigation will address why that design change was not documented, why the software update was not completed, and what needs to change in our controls so known risks are captured, prioritised and closed before they can affect customers."
The outage also draws unwanted attention to the broader fragility of Australia's telecommunications sector, a critical piece of national infrastructure. Rival Optus, the country's second-largest telecoms firm and Brady's former employer before she joined Telstra in 2016, has endured a series of devastating operational failures.
These include a massive 2022 cyberattack that compromised the personal details of millions of individuals. Optus also suffered a day-long outage in 2023 that left millions without internet or phone access, and a 13-hour disruption to emergency call services last year which possibly caused four deaths. For investors, the repeated high-profile failures across the industry's two dominant players signal a systemic vulnerability that will likely invite stricter regulatory oversight.
