Medibank client data was yesterday published by an extortionist, including details of individuals’ medical procedures, after Australia’s largest health insurer refused to pay a ransom for the personal records of almost 10 million current and former customers.
The release of information on the dark Web appeared to be a sample of the data that Medibank had previously determined had been stolen last month, the company said.
Medibank expected the thief would continue releasing data.
Photo: Reuters
“This is a criminal act designed to harm our customers and cause distress,” Medibank chief executive officer David Koczkar said in a statement that reiterated a previous apology to customers.
“We take seriously our responsibility to safeguard our customers and we stand ready to support them,” he said.
Australian Minister for Cybersecurity Clare O’Neil, who is a Medibank customer and has had personal data stolen, urged social and traditional media companies to prevent their platforms from being used to share people’s stolen medical histories.
“If you do so, you will be aiding and abetting the scumbags who are at the heart of these criminal acts, and I know that you would not do that to your own country and your own citizens,” O’Neil told parliament.
She said that the number of people whose medical information had been compromised was “small at this stage.”
“But I want the Australian people to understand that that is likely to change and we are going through a difficult period now that may last for weeks, possibly months, not days and hours,” O’Neil said.
Australian Prime Minister Anthony Albanese, who is also a Medibank customer, welcomed the company’s refusal to pay the hacker to have the records returned.
“This is really tough for people. I’m a Medibank Private customer as well, and it will be of concern that some of this information has been put out there,” Albanese told reporters, referring to a Medibank brand.
“The company has followed the guidelines effectively, the advice, which is to not engage in a ransom payment. If you go down this road, then you end up with more difficulties potentially across a wider range,” Albanese said.
The thieves had reportedly threatened to expose the diagnoses and treatments of high-profile customers unless a ransom of an undisclosed amount was paid, but Medibank decided there was “only a limited chance” that a ransom would prevent the data from being published.
A blogger using the name “Extortion Gang” on Monday night posted on the dark Web that “data will be publish [sic] in 24 hours.”
Medibank this week updated its estimate of the number of people whose personal information was stolen from 4 million two weeks ago to 9.7 million.
The stolen data included health claims of almost 500,000 people including diagnoses and treatments, the company said.
South Korea would soon no longer be one of the few countries where Google Maps does not work properly, after its security-conscious government reversed a two-decade stance to approve the export of high-precision map data to overseas servers. The approval was made “on the condition that strict security requirements are met,” the South Korean Ministry of Land, Infrastructure and Transport said. Those conditions include blurring military and other sensitive security-related facilities, as well as restricting longitude and latitude coordinates for South Korean territory on products such as Google Maps and Google Earth, it said. The decision is expected to hurt Naver and Kakao
THE TRAGEDY OF PUNCH: Footage of the seven-month-old Japanese macaque has gone viral online after he was rejected by his mother and formed a bond with a soft toy A baby monkey in Japan has captured hearts around the world after videos of him being bullied by other monkeys and rejected by his mother went viral last week. Punch, a Japanese macaque, was born in July last year at Ichikawa City Zoo. He has drawn international attention after zookeepers gave him a stuffed orangutan toy after he was abandoned by his mother. Without maternal guidance to help him integrate, Punch has turned to the toy for comfort. He has been filmed multiple times being dragged and chased by older Japanese macaques inside the enclosure. Early clips showed him wandering alone with
MONEY GRAB: People were rushing to collect bills scattered on the ground after the plane transporting money crashed, which an official said hindered rescue efforts A cargo plane carrying money on Friday crashed near Bolivia’s capital, damaging about a dozen vehicles on highway, scattering bills on the ground and leaving at least 15 people dead and others injured, an official said. Bolivian Minister of Defense Marcelo Salinas said the Hercules C-130 plane was transporting newly printed Bolivian currency when it “landed and veered off the runway” at an airport in El Alto, a city adjacent to La Paz, before ending up in a nearby field. Firefighters managed to put out the flames that engulfed the aircraft. Fire chief Pavel Tovar said at least 15 people died, but
Australian Prime Minister Anthony Albanese yesterday said he did not take his security for granted, after he was evacuated from his residence for several hours following a bomb threat sent to a Chinese dance group. Albanese was evacuated from his Canberra residence late on Tuesday following the threat, and returned a few hours later after nothing suspicious was found. The bomb scare was among several e-mails threatening Albanese sent to a representative of Shen Yun, a classical Chinese dance troupe banned in China that is due to perform in Australia this month, a spokesperson for the group said in a statement. The e-mail