We have been advised that Australia Post recently experienced a theft / security breach at its Melbourne GPO location. Read more

We have been advised that Australia Post recently experienced a theft / security breach at its Melbourne GPO location.  This incident may have potentially included items held and managed by the Fund’s administrator, Mercer. We are currently investigating this matter further.

If you sent us physical mail from 1-17 July 2025 and haven’t seen a transaction in your account, for example, to update your details or process an investment switch, or received a response within the expected timeframe from us, please call us on 1300 655 002 to check that we have received your correspondence and advise you of next steps.

If you didn’t post anything to us during the above period, there’s no need to take any action.

Frequently asked questions

As you may have recently noted in media reports, Australia Post was recently subject to theft/security breaches at its Melbourne GPO location that may have included information held and/or managed by our administrator, Mercer. Our investigation is continuing and although we have no confirmed reports at this stage, it’s possible that letters containing members’ personal or financial information was stolen.

Melbourne GPO Box 4303
1 July – 17 July 2025

Members who have sent mail to the above address between the dates listed may be impacted.

At this stage, we have no evidence to suggest that our other GPO boxes across Melbourne have been impacted by this incident. If you didn’t post anything to GPO Box 4303 in July 2025, there’s no need to take action.

If you’ve sent us mail during 1 – 17 July and you haven’t seen the expected transaction appear on your account, for example, an update to your details or processing of an investment switch, or you haven’t received a response from us, please call us on 1300 655 002. Our team is available Monday to Friday between 8.30am and 6.00pm (AET). 

We will check your account and confirm whether we received your request and let you know regarding any next steps.

We can’t track postal requests until they’ve been processed into our systems. The impacted mail was stolen before it was processed by Australia Post. What we can confirm is whether we have received and/or actioned your request, and we can help you with any next steps.

At this stage we don’t know whether we have been impacted by this incident. 

If impacted, it will be limited to members who sent us physical mail between 1 and 17 July 2025.

Your mail is only held at the Australia Post location for a limited time (less than 24 hours). Mail is sent from Australia Post to our scanning facility each day. 

We became aware of the breach at the Melbourne GPO late on Wednesday evening (23 July) and took steps to notify members the next day. 

Security questions

Australia Post is working with Mercer (our administrator) and have advised us of several additional security measures they’ve recently implemented since the break-ins. 

More information can be found on the Australia Post website.

At this stage we don’t know whether our members have been impacted by this incident. 

We take this opportunity to reassure you that your account security is of utmost importance to us. The following steps have been implemented to increase security measures.

  • Mercer have implemented an enhanced security verification process to further protect member accounts.

  • This includes outbound calls to members to verify details and authenticate certain types of requests before processing.

  • The enhanced verification applies to key transactions, such as changes to personal details and payment instructions.

If we contact you, we will only ask for personal details or account information once we have identified you through our security checks.

Read about how you can protect your account, plus security tips on our website.

At this stage, there is no indication that this incident has resulted in member’s data being compromised.

If you believe your personal details may have been compromised, you can take the following steps.

  • Be alert for any suspicious calls, emails, or messages claiming to be from Catholic Super

  • Do not share any personal or financial information

  • Please contact us if you notice anything unusual on your account. 

Read more here on other steps you can take, and ways you can contact us.

Money Smart also has information on what to do if you’ve been impacted by identity theft.

We understand the concern you have and want to assure you that Australia Post have taken additional security measures to keep your post secure.

Transaction questions

Yes you can continue to make changes and updates to your account as you normally would.

If you believe that your information has been compromised we can place additional security measures on your account to stop transactions from being processed. You can do this by contacting us on 1300 655 002. Our team is available Monday to Friday between 8.30am and 6.00pm (AET). 

There are no changes to our processing timeframes. You can expect your request to be processed as per normal.

Yes, the theft is contained to the period between 1st July and 17th July 2025. Since this period, Australia Post has increased security to protect future mail received at this location.

You can continue sending mail to this address. 

Contact us

Have questions?

We have answers.

Visit FAQs
Call us

Monday—Friday, 8:30 am—6:00 pm AET

1300 655 002
Get in touch

Submit a query or feedback online.

Email us
© 2023—2025 Togethr Trustees Pty Ltd ABN 64 006 964 049 AFSL 246383 — *Past performance is not an indication of future performance
We acknowledge all First Peoples of the beautiful lands on which we live and work, and their enduring knowledge and connections to Country. We honour the wisdom of and pay respect to Elders past and present.