Medibank reveals customer data breach much wider than originally thought
2 years, 5 months ago

Medibank reveals customer data breach much wider than originally thought

ABC  

Medibank has revealed that the cyber attack on its customers' data is much wider than originally thought in a "distressing development" that could impact millions of Australians. Key points: Medibank admits that data from some of its main brand customers has been compromised Previously, the company had only confirmed data from budget brand ahm and its international student insurance had been taken The company has apologised for the "distressing development" that means many more customers will be potentially affected Up to four million current Medibank customers may have had their data stolen, plus the healthcare provider has also confirmed that sensitive information linked to past customers is also wrapped up in the saga. Since then, it had said the data breach was confined to its budget insurance company sub-brand ahm, and data collected about international students studying in Australia who use Medibank under its OSHC service. The wider ramifications of Medibank's data breach Cyber security experts warn the latest data breach of a major company should have all companies and consumers worried about the seemingly innocuous collection of data.

Data Information Personal Information Attack Company Customers Customer Confirmed Australians Medibank Koczkar Mr Koczkar Breach Cyber  data  reveals  breach  cyber  australians  customer  company  confirmed  personal  attack  originally  medibank  information  customers  thought  wider

History of this topic

How Medibank allegedly ignored the warning signs in one of Australia's worst cybersecurity breaches
9 months ago

How Medibank allegedly ignored the warning signs in one of Australia's worst cybersecurity breaches

ABC  

Pity the IT guy. In court documents, the commissioner has laid out a timeline of alleged cybersecurity blunders by Medibank amounting to "serious interferences with the privacy of… approximately 9.7 million individuals". It says on around August 7, 2022, the IT contractor's personal computer was hacked by a "threat actor" who stole his Medibank username and password. Medibank warned about …

Health board's chilling warning to EVERY patient after security breach: assume your data was hacked
9 months, 1 week ago

Health board's chilling warning to EVERY patient after security breach: assume your data was hacked

Daily Mail  

A Scottish health board has warned everyone in its area to assume that some of their data has been published online after its IT system was hacked. Officials confirmed that ‘over three terabytes of data’ was published by the hackers following February’s cyber attack, when a ‘substantial amount of patient and staff-identifiable data’ was stolen. ‘This leaflet sets out the …

The absence of multi-factor authentication led to the Medibank hack, regulator alleges
9 months, 1 week ago

The absence of multi-factor authentication led to the Medibank hack, regulator alleges

ABC  

In short: Court documents filed by the OAIC allege Medibank's massive 2022 data hack stemmed from not having multi-factor authentication to access the company's IT systems. Court documents filed by the OAIC allege Medibank's massive 2022 data hack stemmed from not having multi-factor authentication to access the company's IT systems. The Office of the Australian Information Commissioner alleges a lack …

Medibank is being sued by the privacy regulator, a move welcomed by former customers and cybersecurity experts
9 months, 3 weeks ago

Medibank is being sued by the privacy regulator, a move welcomed by former customers and cybersecurity experts

ABC  

In short : The Australian Information Commissioner is suing Medibank over a data breach at the health insurer in 2022. : The Australian Information Commissioner is suing Medibank over a data breach at the health insurer in 2022. Health insurance giant Medibank is facing a maximum fine theoretically in the trillions of dollars after the Australian Information Commissioner filed proceedings …

Australia goes on cyber offensive with sweeping resilience plan
1 year, 4 months ago

Australia goes on cyber offensive with sweeping resilience plan

The Hindu  

Australia will give cyber health checks for small businesses, increase cyber law enforcement funding and introduce mandatory reporting of ransomware attacks under a security overhaul announced on Wednesday after a spate of attacks. The federal government said it will also subject telecommunications firms to tougher cyber reporting rules which apply to critical infrastructure, seek migrants to build up the cyber …

SA Health patients caught up in data breach of third-party platform Personify Care
1 year, 5 months ago

SA Health patients caught up in data breach of third-party platform Personify Care

ABC  

Thousands of South Australian public health patients are being contacted over a data breach of a third-party run portal. Key points: The SA government says the health information of 121 patients and the names and phone numbers of about 12,000 others was deleted by an "unauthorised third party" The data of SA Health patients was held by third-party provider Personify …

Health data breach hitting Congress ‘could be extraordinary’
2 years ago

Health data breach hitting Congress ‘could be extraordinary’

Associated Press  

WASHINGTON — House leaders say the impact of a hack of a health insurance marketplace used by members of Congress “could be extraordinary,” exposing sensitive personal data of lawmakers, their employees and families. In a letter to the exchange’s director posted on Twitter, House Speaker Kevin McCarthy, R-Calif., and Minority Leader Hakeem Jeffries, D-N.Y., said the breach “significantly increase the …

Law firms launch data breach legal case against Medibank. How will it work and who will benefit?
2 years, 2 months ago

Law firms launch data breach legal case against Medibank. How will it work and who will benefit?

ABC  

Three law firms have joined forces to launch a data breach legal case against health insurance company Medibank. The law firms are seeking compensation for Medibank and ahm health insurance customers who had their names, emails, mental health information and other data leaked. Professor Legg says this case has the ability to set a precedent for data breach cases in …

Medibank data leak extends to Australians who sought quotes from health insurance firm ahm
2 years, 2 months ago

Medibank data leak extends to Australians who sought quotes from health insurance firm ahm

ABC  

Potential health insurance customers who requested quotes with ahm have been caught up in the data breach affecting millions of Medibank customers. Key points: The personal information of up to 9.7 million Medibank customers was stolen and released in October 2022 People who had obtained quotes with health insurer ahm, part of Medibank, have been caught up in the data …

Three class action firms join forces to litigate Medibank breach
2 years, 2 months ago

Three class action firms join forces to litigate Medibank breach

ABC  

Australian law firms have joined forces to run a landmark data breach complaint against private health insurer Medibank after data from millions of customers was released on the dark web in October. Maurice Blackburn Lawyers, Bannister Law Class Actions and Centennial Lawyers have united to run the data breach complaint against Medibank, which they say could secure compensation for as …

The editorial questions ABC News journalists faced when covering the Medibank data leak
2 years, 3 months ago

The editorial questions ABC News journalists faced when covering the Medibank data leak

ABC  

"Added one more file: abortions." Business reporter Emilia Terzon was among a team of ABC journalists who investigated the Medibank data leak over several weeks. As well as the "abortion" file, they posted stolen data about Medibank customers who had sought treatment for substance use, something that one-in-20 of us have struggled with, according to federal healthcare data. Medibank details …

After Optus, Medibank hacks, the government plans to firm-up defences for ATO, Centrelink data
2 years, 3 months ago

After Optus, Medibank hacks, the government plans to firm-up defences for ATO, Centrelink data

ABC  

The protection of taxpayer, health and Centrelink data against bot attacks and other cybercrimes will be beefed up as the government works to lock down sensitive data. Tender documents show the Department of Finance is looking for better security after hack attacks on Optus and Medibank exposed the data of millions, leaving people exposed to extortion and identity theft. "The …

More Medibank customer data released onto dark web. Has everything now been released?
2 years, 3 months ago

More Medibank customer data released onto dark web. Has everything now been released?

ABC  

Medibank has confirmed that more stolen customer data has been released on the dark web, amid reports the hackers have released all files remaining in their possession. Key points: Medibank has confirmed that further stolen customer data has been released The hackers have commented "case closed" on their post describing the latest release Cyber security experts say it remains unclear …

Medibank hack: Russian hackers release biggest trove of information yet
2 years, 3 months ago

Medibank hack: Russian hackers release biggest trove of information yet

Daily Mail  

Russian hackers are believed to have published all remaining stolen data from Medibank - putting the personal information of up to 9.7million Australians at risk. About 9.7 million current and former customers are believed to have been affected by the data breach November 30 is 'International Cyber Security Day', an ironic occasion for the hackers to post the data. Medibank …

Medibank defends decision to not pay hackers ransom for stolen data as it contacts 480,000 customers
2 years, 4 months ago

Medibank defends decision to not pay hackers ransom for stolen data as it contacts 480,000 customers

ABC  

Medibank’s boss says the company will begin directly communicating with nearly half a million customers whose health data is believed to have been stolen, weeks after it first became aware hackers had breached its customer database. Medibank's chief executive David Koczkar said the company had started on Wednesday communicating with about 480,000 customers whose health data was believed to have …

Australia blames Russians for health insurance data theft
2 years, 4 months ago

Australia blames Russians for health insurance data theft

Associated Press  

CANBERRA, Australia — Moscow must he held to account for Russian cybercriminals accused of hacking Australia’s largest health insurer and dumping customers’ personal medical records on the dark web, Australian officials said Friday. A group of “loosely affiliated cybercriminals” operating like a business in Russia were likely responsible for the Medibank attack as well as other significant security breaches around …

Russia responds after AFP Commissioner says Medibank hackers based in Russia
2 years, 4 months ago

Russia responds after AFP Commissioner says Medibank hackers based in Russia

ABC  

Russia's embassy in Australia has criticised a statement by Australian Federal Police Commissioner Reece Kershaw that those responsible for the Medibank hack are based in Russia, saying the announcement was made before the AFP contacted Russian law enforcement agencies. Key points: AFP Commissioner Reece Kershaw says a group of cyber criminals based in Russia are believed to be responsible for …

Medibank criminal hackers trying to 'incite' fear as customers realise extent of data dump
2 years, 4 months ago

Medibank criminal hackers trying to 'incite' fear as customers realise extent of data dump

ABC  

Cybercriminals continue to drip feed stolen Medibank customer data, in a move experts say appears to be designed to "incite fear". Key points: Cyber security experts said more support is needed for victims of the Medibank hack Affected customers have called for changes to data retention laws There are also calls for the payment of ransoms to be illegal In …

Healthcare industry continues to be main target of data breaches, with 79 reported in six months
2 years, 4 months ago

Healthcare industry continues to be main target of data breaches, with 79 reported in six months

ABC  

The healthcare industry has again reported the most data breaches to the privacy regulator in the first half of 2022, continuing a trend since Australia's reporting scheme began in 2018. Key points: Health services reported 79 data breaches from January to June 2022 Overall, 396 data breaches were reported to the privacy regulator The notifiable data breach scheme has been …

Hackers have released stolen Medibank data on the dark web. What does this mean for customers?
2 years, 4 months ago

Hackers have released stolen Medibank data on the dark web. What does this mean for customers?

ABC  

Some of the stolen Medibank customer data has been leaked online after Australia's largest health insurance provider refused to pay a ransom to hackers. Loading YouTube content Medibank has started a dedicated cyber crime support package, including: A hardship package to provide financial support for customers who are in a uniquely vulnerable position as a result of this crime, who …

Hackers claim they demanded $15 million ransom as more Medibank customer data posted to dark web
2 years, 4 months ago

Hackers claim they demanded $15 million ransom as more Medibank customer data posted to dark web

ABC  

The Medibank hackers claim they demanded a $US9.7 million ransom not to release stolen customer information, as the health insurer blasted their latest data dump as a "malicious" attack on vulnerable Australians. Key points: Medibank previously warned customers it expected more stolen information to be released Cyber Safety Minister Clare O'Neil is calling on social media companies to make sure …

NSW government agencies legally required to report data breaches under proposed law
2 years, 4 months ago

NSW government agencies legally required to report data breaches under proposed law

ABC  

NSW government agencies will legally be required to report customer data breaches like cyber attacks if a new bill is passed through parliament. Key points: NSW would be the first state or territory to legalise reporting data breaches The move comes after customer data was hacked at Optus and Medibank The Opposition says the bill is a "common sense" measure …

Hacker releases Australian health insurer’s customer data
2 years, 4 months ago

Hacker releases Australian health insurer’s customer data

Associated Press  

CANBERRA, Australia — Client data from Medibank, Australia’s largest health insurer, was released by an extortionist on Wednesday, including details of HIV diagnoses and drug abuse treatments, after the company refused to pay a ransom for the personal records of almost 10 million current and former customers. “Letting customers discover their most sensitive information imaginable has been published and hearing …

Medibank confirms names, addresses, birthdays posted to dark web by hackers after ransom deadline passes
2 years, 4 months ago

Medibank confirms names, addresses, birthdays posted to dark web by hackers after ransom deadline passes

ABC  

Medibank has confirmed that the criminals responsible for stealing customer data have released some of that information on a dark web forum. Key points: Medibank has confirmed stolen data has been released on the dark web Medibank customers have been told to be alert for any phishing scams via phone, post or email. Around 9.7 million current and former Medibank …

Cyber-extortionist leaks Australians’ medical records online
2 years, 4 months ago

Cyber-extortionist leaks Australians’ medical records online

Al Jazeera  

Private insurer Medibank says it expects more customers details to be published online. A cyber-extortionist has leaked details of Australians’ medical histories online after a private health insurer refused to pay a ransom for the hacked records of almost 10 million customers. “It’s always a shock to have your data leaked online, particularly this volume of this sensitivity,” Troy Hunt, …

Medibank hackers target high-profile drug and mental health patients as AFP steps up action
2 years, 4 months ago

Medibank hackers target high-profile drug and mental health patients as AFP steps up action

ABC  

Medibank customers remain in the dark about whether any of their personal information is among that leaked onto the dark web by hackers. Key points: The ABC understands that basic information of around 5 million Medibank customers has been posted on the dark web A list termed "naughty" by the hackers is said to feature around a hundred people with …

Extortionist threatens to publish Australian customer data
2 years, 4 months ago

Extortionist threatens to publish Australian customer data

Associated Press  

CANBERRA, Australia — An extortionist has threatened to make Medibank customer data public within 24 hours after Australia’s largest health insurer refused to pay a ransom for the personal records of almost 10 million current and former customers. “Based on the extensive advice we have received from cybercrime experts, we believe there is only a limited chance paying a ransom …

Medibank data leak threatened by cybercriminal as class action lawsuits loom
2 years, 4 months ago

Medibank data leak threatened by cybercriminal as class action lawsuits loom

ABC  

A cybercriminal individual or group demanding a ransom has threatened to release Medibank client data as Australia's largest health insurer faces a possible class action over the hacking of sensitive information for 9.7 million current and former customers. Key points: An individual or group claiming to have Medibank customer data has threatened to release it within the next 24 hours …

Australian firms roiled by raft of cyberattacks this year
2 years, 4 months ago

Australian firms roiled by raft of cyberattacks this year

The Hindu  

Australian firms have suffered a flood of cyberattacks, putting the spotlight on country's understaffed cybersecurity industry which experts say seems ill-equipped to tackle such hacks, thus endangering sensitive information of millions of people. Woolworths Australia's biggest grocer Woolworths Group Ltd. said its majority-owned online retailer MyDeal identified that a "compromised user credential" was used to access its systems, exposing email …

Medibank cyber attack: what personal data has been accessed and what can you do?
2 years, 4 months ago

Medibank cyber attack: what personal data has been accessed and what can you do?

ABC  

Medibank has detailed what personal information it believes a cybercriminal has accessed from customers in the latest update on the hack of the company's data. Medibank believes health claims data, including service provider name and location, what type of medical service was received, and codes related to diagnoses and procedures were accessed for 160,000 Medibank customers. ahm customers Medibank believes …

Medibank refuses to pay ransom for hacked data as affected customer number doubles to 9.7m
2 years, 4 months ago

Medibank refuses to pay ransom for hacked data as affected customer number doubles to 9.7m

ABC  

Medibank says no ransom payment will be made to the criminal responsible for the recent data hack as the the private health provider put a further head figure in data losses. Key points: Medibank is yet to confirm the figure of the ransom demand But it believes paying could have "the opposite effect" and encourage criminal behaviours The number of …

Medibank CEO says ransom amount 'irrelevant' and paying up would only increase risk of further extortion
2 years, 4 months ago

Medibank CEO says ransom amount 'irrelevant' and paying up would only increase risk of further extortion

ABC  

The boss of embattled insurer Medibank says the value of the ransom demand from cyber criminals was "irrelevant" in the company's decision not to negotiate with the hackers. Key points: The company says details of 9.7 million current and former customers have been accessed Almost half a million customers had private health data accessed Medibank chief executive David Koczkar said …

Hackers could see Australia as weak target after Optus, Medibank data breaches, insider says
2 years, 4 months ago

Hackers could see Australia as weak target after Optus, Medibank data breaches, insider says

ABC  

International computer-hacking syndicates will be eyeing off more Australian targets after a string of recent data breaches, a cybersecurity expert says. Key points: Cybersecurity expert Ben Walker says hackers will "be emboldened" by data breaches at Optus and Medibank He is surprised Medibank was successfully targeted because it had "quite sophisticated" cyber defences Data breach researcher Jane Andrew says smaller …

Privacy fears for children caught up in Medibank data breach
2 years, 5 months ago

Privacy fears for children caught up in Medibank data breach

ABC  

Sarah's* children have been insured under her Medibank family health insurance policy almost since they were born. Key points: Medibank has confirmed data shared by the hacker includes customers under 18 Personal and health claims data for people who are or were under 18 has also been accessed Experts say health data leaks put kids as well as their parents …

Medibank and Optus hacks spark warning over identity theft risks from former victims
2 years, 5 months ago

Medibank and Optus hacks spark warning over identity theft risks from former victims

ABC  

The first thing Sarah* knew about her identity being hacked was when a man turned up on her parents' doorstep asking for the sexual services he'd paid for online. Key points: In the wake of recent cyber attacks, former identity theft victims are sounding the alarm Medibank says the personal data of millions of customers was breached Licences and passport …

Australian health insurer says data of all customers hacked
2 years, 5 months ago

Australian health insurer says data of all customers hacked

The Hindu  

Australia’s largest health insurer said on Wednesday a cybercriminal had hacked the personal data of all its 4 million customers, as the government introduced legislation that would increase penalties for companies that fail to protect clients’ private information. Medibank said “significant amounts of health claims data” had also been accessed in the breach, which was reported to police a week …

Medibank says all customers' personal data compromised by cyber attack
2 years, 5 months ago

Medibank says all customers' personal data compromised by cyber attack

ABC  

Medibank has confirmed the criminal entity behind the cyber attack on the company had access to the data of at least 4 million customers, some of which includes health claims. Key points: The hacker accessed all Medibank, ahm and international student customers' personal data The hacker also accessed significant amounts of data on health claims Medibank expects its investigation to …

Customers in limbo as Medibank data breach shapes up as far worse than the Optus hack
2 years, 5 months ago

Customers in limbo as Medibank data breach shapes up as far worse than the Optus hack

ABC  

When Zhan Huang heard that Medibank had been hacked two weeks ago, his heart sank. The company said the data breach impacted its main brand, budget insurance company sub-brand ahm and data collected about international students studying in Australia who use Medibank under its OSHC service. Fears of scams and safety issues Chinese international student Amber Xu transferred her OSHC …

All Medibank customers' personal data was compromised in the cyber attack. Who is at risk and what should customers do?
2 years, 5 months ago

All Medibank customers' personal data was compromised in the cyber attack. Who is at risk and what should customers do?

ABC  

Millions of Medibank customers may have had their information stolen, with the company revealing hackers accessed the personal data of all customers across its Medibank, ahm and OSHC brands. In a statement on Wednesday morning, Medibank confirmed the criminal entity behind the hack had accessed all Medibank, ahm and international student customers' personal data and a "significant amount" of health-claims …

Medibank, Optus, Woolworths data hacks show how a 'decade of anti-security policy' is putting Australia at risk, experts say
2 years, 5 months ago

Medibank, Optus, Woolworths data hacks show how a 'decade of anti-security policy' is putting Australia at risk, experts say

ABC  

Millions of Australians have had a bad run with their personal data lately. Whether it's telecommunications companies like Optus, private health insurers like Medibank, massive online retailers like MyDeal, or smaller online wine sellers like Vinomofo — hackers are getting hold of our data regularly. But internet security expert Troy Hunt, who runs the website haveibeenpwned.com said the data was …

Medibank, Optus hacks and ATO attacks expose identity-theft risks, warn cyber security experts
2 years, 5 months ago

Medibank, Optus hacks and ATO attacks expose identity-theft risks, warn cyber security experts

ABC  

The Australian Tax Office has revealed it gets 3 million attempted hacks on its systems every month, in a staggering indication of why all companies and organisations should be worried about breaches to their customers' data. Fergus Hanson from ASPI's International Cyber Policy Centre told ABC News that the Medibank hack was particularly concerning because of the sorts of personal …

Hacker holds Australian health insurer’s data for ransom
2 years, 5 months ago

Hacker holds Australian health insurer’s data for ransom

Associated Press  

CANBERRA, Australia — A cybercriminal was holding for ransom an Australian health insurer’s customer data including diagnoses and treatments, in the nation’s second major privacy breach in a month, officials said on Thursday. Trade in Medibank shares has been halted on the Australian Securities Exchange since Wednesday when police were alerted that the company had been contacted by what it …

What we know about the Medibank cyber attack and what to do if you're a customer
2 years, 5 months ago

What we know about the Medibank cyber attack and what to do if you're a customer

ABC  

Health insurance provider Medibank is the latest Australian organisation to be hit by a cyber attack. Medibank was hit by a cyber attack last week but at the time the company said there was no evidence that sensitive data had been accessed but at the time the company said there was no evidence that sensitive data had been accessed On …

Medibank admits personal data stolen in cyber attack
2 years, 5 months ago

Medibank admits personal data stolen in cyber attack

ABC  

Medibank has admitted that the personal data of some of its customers — including names, addresses, Medicare numbers and phone numbers — has been stolen in a cyber attack. Key points: As well as personal details, some data about medical claims — including particular services — has been stolen Medibank expects the number of affected customers is expected to grow …

Health insurer Medibank Private halts trading after receiving message from company claiming to be behind cyber attack
2 years, 5 months ago

Health insurer Medibank Private halts trading after receiving message from company claiming to be behind cyber attack

ABC  

Health insurer Medibank Private has confirmed it has received messages from a group wishing to negotiate with the company regarding their alleged removal of customer data. Key points: Hackers targeted the private health insurer last week The company has halted trade until further notice The CEO has apologised to customers for the distressing update The update comes less than a …

Health insurer Medibank Private hit by cyber attack
2 years, 5 months ago

Health insurer Medibank Private hit by cyber attack

ABC  

Health insurer Medibank Private says it has been hit by a cyber attack. Key points: It is Australia's latest cyber attack after the Optus breach last month, which affected millions of customers Medibank's ahm and international student policy management systems are currently offline Investigations into the cyber attack are ongoing The company said "unusual activity" had been detected on its …

Patients’ medical records under threat from data breaches
9 years, 11 months ago

Patients’ medical records under threat from data breaches

Associated Press  

CHICAGO — Your private medical information is under threat. That’s according to a study that found almost 30 million health records nationwide were involved in criminal theft, malicious hacking or other data breaches over four years. The study didn’t examine motives behind criminal breaches, or how stolen data might have been used, but cyber-security experts say thieves may try to …

Discover Related