Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Australian Health Insurer Medibank Admits Customer Data Stolen in Ransomware Attack

Australian health insurer Medibank has started informing customers that their personal information was potentially compromised during a recent cyberattack.

Australian health insurer Medibank has started informing customers that their personal information was potentially compromised during a recent cyberattack.

The incident was initially identified on October 12 and was deemed as being “consistent with the precursors to a ransomware event”, resulting in certain systems being taken offline for containment purposes. Medibank said its systems were not encrypted by ransomware during the incident.

At first, the company said that it found no evidence that any customer data might have been exfiltrated from its network, but that changed after a threat actor contacted Medibank, claiming that they had stolen roughly 200 gigabytes of data during the cyberattack.

“Medibank has been contacted by a criminal claiming to have stolen 200GB of data. The criminal has provided a sample of records for 100 policies which we believe has come from our ahm and international student systems,” the company announced on Thursday.

The exfiltrated personal information includes full names, addresses, birth dates, phone numbers, medicare and policy numbers, and claims data (such as the location where the customer received medical services).

The attacker also claims to have stolen credit card security information, as well as other types of data, but Medibank says it has not been able to verify the claim yet.

Medibank says it is working on identifying what other types of customer data might have been impacted. The health insurer has more than 3.9 million customers.

“We are making direct contact with the affected customers to inform them of this latest development, and to provide support and guidance on what to do next. We expect the number of affected customers to grow as the incident continues,” the company says.

The company says it has identified and contained the attack before ransomware was deployed on its network and that it has now fully restored the services that were impacted in the incident. However, Medibank also announced a trading halt on its shares.

Related: Australian Health Insurer Medibank Targeted in Cyberattack

Related: New York Emergency Services Provider Says Patient Data Stolen in Ransomware Attack

Related: OneTouchPoint Discloses Data Breach Impacting Over 30 Healthcare Firms

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Expert Insights

Related Content

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

A new study by McAfee and the Center for Strategic and International Studies (CSIS) named a staggering figure as the true annual cost of...

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Cybercrime

Video games developer Riot Games says source code was stolen from its development environment in a ransomware attack

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Cybercrime

Artificial intelligence is competing in another endeavor once limited to humans — creating propaganda and disinformation.

Management & Strategy

Industry professionals comment on the recent disruption of the Hive ransomware operation and its hacking by law enforcement.