Incident at the Australia Post Melbourne GPO

Australia Post experienced a security breach at the Melbourne GPO potentially impacting a large number of GPO box owners, including Mercer. It is possible that letters containing investors’ personal or financial information were stolen.

If you have sent us mail to the GPO Box 9946 from 1 to 17 July 2025 and have not received a response within the expected timeframe or have noticed anything that may be suspicious, please call us on 1300 728 928 Monday to Friday 8.30am to 5.30pm (AEST/AEDT).

We will help confirm whether we received your correspondence and advise on next steps.

If no information was posted to us during the above period, there’s no need to take any action.

Frequently asked questions

General

Have the authorities been notified?

Yes, we are in contact with Australia Post who have reported the incident to Victoria Police who are investigating the incident.

How many investors have been impacted?

The potential impact is limited to investors who sent mail via post to our Melbourne GPO Box 9946 in July and have not received an acknowledgement from us or have noticed anything that may be suspicious.

Is more information about this incident available?

More information about this incident can be found on Australia Post’s website

Account security

What are you doing to stop this happening again?

We are working with Australia Post who have advised that they have implemented a range of additional security measures following the break-ins, including after-hours security presence at this site.

Is my investment safe?

At this point we believe that this incident has not impacted investors’ accounts and has not impacted the GPO Box 804 to which investor transaction information is typically posted.

We regard the security of your personal information of the utmost importance. If you receive a suspicious email or one requesting information such as your personal details, account information, password or other log in details, do not open any attachments and contact us immediately via 1300 728 928 Monday to Friday 8.30am to 5.30pm (AEST/AEDT) or email us at InvestorHelpAU@mercer.com.

Has any of my information been published externally or sold?

Currently there is no indication that any investor’s personal information has been published externally or sold as a result of this incident.

What should I do to protect my personal information?

If you believe that your personal information has been compromised, take the following steps:

  • Be alert for any suspicious emails, calls, or messages claiming to be from Mercer.
  • Do not share personal or financial information unless you are sure of the source.
  • If you notice anything unusual, contact us immediately.

For further information on identity theft, visit the MoneySmart website.

We are here to help

If you have any questions or concerns, please call us on 1300 728 928 Monday to Friday 8.30am to 5.30pm (AEST/AEDT).