We have been advised that Australia Post recently experienced a theft / security breach at its Melbourne GPO location. Read more
Updated 31 July

We have been advised that Australia Post recently experienced security breaches at its Melbourne GPO location.  We are currently investigating this matter further.

If you sent us mail from 1-17 July 2025 and haven’t seen a transaction in your account – and you haven’t seen the expected transaction appear on your account or received a response from us – there’s a chance you could have been impacted.

If you didn’t post anything to us during the above period, there’s no need to take any action.

Frequently asked questions

As you may have recently noted in media reports, Australia Post was recently subject to security breaches at its Melbourne GPO location that included our GPO Box 4303 address. Our investigation is continuing and it’s possible that letters containing members’ personal or financial information was stolen.

Melbourne GPO Box 4303
1 July – 17 July 2025

Members who have sent mail to the above address between the dates listed may be impacted.

At this stage, we have no evidence to suggest that our other GPO boxes across Melbourne have been impacted by this incident. If you didn’t post anything to GPO Box 4303 in July 2025, there’s no need to take action.

If you've sent us mail during 1 – 17 July - and you haven’t seen the expected transaction appear on your account or received a response from us - please call us on 1300 655 002. Our team is available Monday to Friday between 8.30am and 6.00pm (AET). 

We will check your account and confirm whether we received your request and let you know regarding any next steps.

We can’t track postal requests until they’ve been processed into our systems. The impacted mail was stolen before it was processed by Australia Post. What we can confirm is whether we have received and/or actioned your request, and we can help you with any next steps.

Members who sent mail to our GPO Box 4303 between 1 and 17 July 2025 may be impacted.

Your mail is only held at the Australia Post location for a limited time (less than 24 hours). Mail is sent from Australia Post to our scanning facility each day. 

We updated our website on July 24 with details about what had happened at our GPO Box 4303.

We’ve also contacted members directly, either via their email or postal preference, to provide an update on this issue.

Security questions

Australia Post have advised us of several additional security measures they’ve recently implemented since the break-ins. 

More information can be found on the Australia Post website.

We take this opportunity to reassure you that your account security is of utmost importance to us. The following steps have been implemented to increase security measures.

  • We've introduced an enhanced security verification process to further protect member accounts.

  • This includes outbound calls to members to verify details and authenticate certain types of requests before processing.

  • The enhanced verification applies to key transactions, such as changes to personal details and payment instructions.

If we contact you, we’ll authenticate your identity before we discuss any information specific to your account. If you prefer, you can end the call and then call us back on 1300 655 002 to verify that it’s us.

Read about how you can protect your account, plus security tips on our website.

If you believe your personal details may have been compromised, you can take the following steps.

  • Be alert for any suspicious calls, emails, or messages claiming to be from Catholic Super
  • Don’t share any personal or financial information
  • Contact us if you notice anything unusual on your Catholic Super account
  • Contact your bank if you notice any suspicious bank account activity
  • If you ever receive an email or phone call asking for your personal details or account information, please contact us immediately.

Read more here on other steps you can take, and ways you can contact us.

Money Smart also has information on what to do if you’ve been impacted by identity theft.

We understand the concern you have. We’ve already taken steps to add security measures to some types of transactions.

Transaction questions

Yes, you can continue to make changes and updates to your account as you normally would.

There are no changes to our processing timeframes. You can expect your request to be processed as per normal.

Yes, the theft is contained to the period between 1st July and 17th July 2025. 

You can continue sending mail to this address. 

Contact us

Have questions?

We have answers.

Visit FAQs
Call us

Monday—Friday, 8:30 am—6:00 pm AET

1300 655 002
Get in touch

Submit a query or feedback online.

Email us
© 2023—2025 Togethr Trustees Pty Ltd ABN 64 006 964 049 AFSL 246383 — *Past performance is not an indication of future performance
We acknowledge all First Peoples of the beautiful lands on which we live and work, and their enduring knowledge and connections to Country. We honour the wisdom of and pay respect to Elders past and present.