Hacker holds Australian health insurer’s data for ransom

Oct 20, 2022, 12:21 AM | Updated: 3:00 am
People walk past a Medibank branch in Sydney, Thursday, Oct. 20, 2022. Medibank health insurer is b...

People walk past a Medibank branch in Sydney, Thursday, Oct. 20, 2022. Medibank health insurer is being extorted for customers' data in the nation's second major cybersecurity breach in a month, an official says. (AP Photo/Rick Rycroft)

(AP Photo/Rick Rycroft)

CANBERRA, Australia (AP) — A cybercriminal was holding for ransom an Australian health insurer’s customer data including diagnoses and treatments, in the nation’s second major privacy breach in a month, officials said on Thursday.

Trade in Medibank shares has been halted on the Australian Securities Exchange since Wednesday when police were alerted that the company had been contacted by what it described as a “criminal” who wanted to negotiate over the stolen personal data of customers.

Medibank, which has 3.7 million customers, said on Thursday the criminal had provided a sample of 100 customer policies from a purported haul of 200 gigabytes of stolen data.

Details included customer names, addresses, birth dates, national health care identification numbers and phone numbers.

Cybersecurity Minister Clare O’Neil said most concerning was that records of medical diagnoses and procedures had also been stolen.

“Financial crime is a terrible thing. But ultimately, a credit card can be replaced,” O’Neil told reporters.

“The threat that is being made here to make the private, personal health information of Australians made available to the public is a dog act,” she added.

The thief had threatened to sell Medibank data to third parties and singled out records of 1,000 politicians, media personalities, actors, LGBTQ activists and drug addicts for exposure, Nine Network News reported.

“We found people with very interesting diagnoses,” the thief reportedly wrote to Medibank.

Medibank declined to comment on the reported threats and would not release details beyond its statement to the Australian Securities Exchange.

The Medibank breach came a month after a cyberattack stole from telecommunications company Optus the personal data of 9.8 million customers.

The Optus breach, which compromised the personal data of more than one-third of Australia’s population, prompted the government to propose urgent reforms to privacy laws that would increase penalties for companies that fail to protect customers’ data and limit the quantity of data that can be retained.

O’Neil said cybercrime was a growing problem around the world and that Australia needed to be better prepared.

“We are going to be under relentless cyberattack essentially from here on in, and what it means is that we need to do a lot better as a country to make sure that we are doing everything we can within organizations to protect customer data and also for citizens to be doing everything that they can,” O’Neil said.

“Combined with Optus, this is a huge wake-up call for the country and certainly gives the government a really clear mandate to do some things that frankly probably should have been done five years ago, but I think are still very crucially important,” she added, referring to privacy law reforms that the government hopes to pass through Parliament this year.

O’Neil described the Medibank breach as a “ransomware attack,” which the government defines as an attack with malware that locks or encrypts files so that the owner can no longer access them.

O’Neil’s office later said she misspoke and meant that the culprit had demanded ransom.

Medibank said its systems had not been encrypted by ransomware and its usual customer activities continued.

Medibank chief executive David Koczkar said his company was working with specialized cybersecurity firms as well as police and government experts in response to the breach.

“I unreservedly apologise for this crime which has been perpetrated against our customers, our people and the broader community,” Koczkar said in a statement.

“I know that many will be disappointed with Medibank and I acknowledge that disappointment,” he added.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.


              People walk past a Medibank branch in Sydney, Thursday, Oct. 20, 2022. Medibank health insurer is being extorted for customers' data in the nation's second major cybersecurity breach in a month, an official says. (AP Photo/Rick Rycroft)
            
              People walk past a Medibank branch in Sydney, Thursday, Oct. 20, 2022. Medibank health insurer is being extorted for customers' data in the nation's second major cybersecurity breach in a month, an official says. (AP Photo/Rick Rycroft)

AP

FILE - Eggs are displayed on store shelves at a local grocery store in Chandler, Ariz., Jan. 21, 20...
Associated Press

FACT FOCUS: Egg shortage breeds chicken-feed conspiracies

Social media users claim to have found a new culprit for sky-high egg prices: chicken feed. The theory gained steam on Facebook, TikTok and Twitter in recent weeks, with some users reporting that their hens stopped laying eggs and speculating that common chicken feed products were the cause. Some went a step further to suggest […]
18 hours ago
Associated Press

Ransomware attacks in Europe target old VMware, agencies say

ROME (AP) — Cybersecurity agencies in Europe are warning of ransomware attacks exploiting a 2-year-old computer bug as Italy experienced widespread internet outages. The Italian premier’s office said Sunday night the attacks affecting computer systems in the country involved “ransomware already in circulation” in a product made by cloud technology provider VMware. A Friday technical […]
18 hours ago
FILE - A fuel trucks drives along a highway in Frankfurt, Germany, Jan. 27, 2023. European Union go...
Associated Press

Europe bans Russian diesel, other oil products over Ukraine

The new sanctions create uncertainty about prices as the 27-nation European Union finds new supplies of diesel from the U.S., Middle East and India.
18 hours ago
FILE - Visitors arrive at the Adventureland Park amusement park, July 6, 2021, in Altoona, Iowa. On...
Associated Press

Ride at Iowa amusement park where boy died will never reopen

ALTOONA, Iowa (AP) — The ride at an Iowa amusement park where an 11-year-old boy was killed in 2021 will never reopen, the park’s owners said. Bill Lentz, Adventureland’s general manager, said in a letter posted on the park’s website Friday that after spending months reviewing the safety of the Raging River ride, officials decided […]
18 hours ago
East Palestine resident Kathy Burr waits for help at the Norfolk Southern Assistance Center at the ...
Associated Press

Safety Board: Mechanical defect caused Ohio train wreck

EAST PALESTINE, Ohio (AP) — A mechanical issue with a rail car axle caused the fiery derailment of dozens of freight cars in Ohio near the Pennsylvania state line Friday night, federal investigators announced Sunday. The smoldering tangle of cars, some carrying hazardous materials, kept an evacuation order in effect. Michael Graham, a board member […]
18 hours ago
This image released by Universal Pictures shows Dave Bautista, from left, Abby Quinn, and Nikki Amu...
Associated Press

‘Knock at the Cabin’ knocks off ‘Avatar’ at the box office

NEW YORK (AP) — For the first time in almost two months, the box office doesn’t belong to blue people. After seven weeks as the top film in theaters, “Avatar: The Way of Water” was finally knocked out of the No. 1 spot by the M. Night Shyamalan thriller “Knock at the Cabin” and the […]
18 hours ago

Sponsored Articles

...
Quantum Fiber

How high-speed fiber internet edges out cable for everyday use

In a world where technology drives so much of our daily lives, a lack of high-speed internet can be a major issue.
(Desert Institute for Spine Care photo)...
DESERT INSTITUTE FOR SPINE CARE

Why DISC is world renowned for back and neck pain treatments

Fifty percent of Americans and 90% of people at least 50 years old have some level of degenerative disc disease.
...
Quantum Fiber

Stream 4K and more with powerful, high-speed fiber internet

Picking which streaming services to subscribe to are difficult choices, and there is no room for internet that cannot handle increased demands.
Hacker holds Australian health insurer’s data for ransom