Data Breach

Medibank Data Breach

9.7M records exposed • October 2022

Australia's biggest health insurance company got hacked. The criminals stole extremely sensitive medical information and tried to extort the company by threatening to release it.

What Happened

Medibank, Australia's largest health insurer, was breached using stolen credentials. Attackers accessed sensitive health claims data including mental health and abortion records.

Attack method: Stolen credentials

What Data Was Exposed

Names, Dates of birth, Email addresses, Phone numbers, Addresses, Medicare numbers, Health claims data, Medical records

Is your business exposed?

What to Do If You're Affected

  1. 1.

    Enroll in offered identity protection

  2. 2.

    Be prepared for targeted scams using health data

  3. 3.

    Request a copy of what data was accessed

Lessons for Businesses

  • Health data is extremely sensitive
  • MFA on all accounts is essential
  • Refusing ransom has consequences

Sources

Related Breaches

Anthem, Change Healthcare

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required