Medibank Data Breach: Hackers Upload More Customer Data, Say 'Case Closed' on World Cybersecurity Day

Medibank said six zipped files placed in a folder called "full" and containing raw data believed to have been stolen had been uploaded by the hackers.

By Reuters | Updated: 1 December 2022 16:52 IST

Medibank Data Breach: Hackers Upload More Customer Data, Say 'Case Closed' on World Cybersecurity Day

Photo Credit: Medibank

Medibank hackers reportedly released the complete set of data on millions of customers

Highlights

Australia has become a target for hackers due to a skills shortage
At least eight companies reported breaches since September
Medibank said there were no signs that banking data had been stolen

Medibank, Australia's biggest health insurer, said on Thursday hackers had released more of its stolen medical records, as the media reported that the complete set of data on millions of customers was now public.

The Office of the Australian Information Commission (OAIC), the country's privacy regulator, has also begun investigating how the company handles personal information, Medibank said in a statement.

The latest release on the dark web follows progressive uploads, including records of customers' mental health and alcohol use, that began after Medibank said on November 7 it would not pay a ransom.

Hackers Demand $10 Million for Medibank's Stolen Australian Health Records

"The raw data we have analysed today so far is incomplete and hard to understand," chief executive David Koczkar said. "While there are media reports of this being a signal of 'case closed', our work is not over."

On Thursday, the media reported that a blog, believed by cyber experts to be used by the hackers, carried a new post: "Happy Cyber Security Day!!! Added folder full. Case closed." It also included a file that had several compressed files amounting to more than 5 gigabytes.

Reuters has not verified the contents of the latest files uploaded on the dark web, part of the World Wide Web that is accessible only with special software.

Hackers Post Australian Health Insurer Medibank's Data to the Dark Web

Medibank did not immediately respond to a Reuters question about whether it believed all stolen data had now been released.

Australian Federal Police last month said Russia-based hackers were behind the Medibank cyberattack, which compromised the details of almost 10 million current and former customers. Medicare revealed the breach on October 13.

In an update on Thursday morning, Medibank said there were currently no signs that banking data had been stolen. Personal details accessed by hackers were not enough to enable financial fraud, it added.

Six zipped files placed in a folder called "full" and containing raw data believed to have been stolen had been uploaded, Medibank said in a statement.

Australia has been grappling with a recent rise in cyber attacks. At least eight companies, including telecoms company Optus, owned by Singapore Telecommunications, have reported breaches since September.

The OAIC, which is also investigating Optus over the breach, did not immediately respond to a Reuters request for comment on the Medibank investigation.

Technology experts have said Australia has become a target for hackers just as a skills shortage leaves an understaffed, overworked cybersecurity workforce ill-equipped to stop attacks.

Are the gaming-centric Asus ROG Phone 6 and 6 Pro worth the price jump? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.