Security News > 2022 > October > Medibank hack turned into a data breach: The attackers are demanding money

Medibank, Australia's largest private health provider, has confirmed that last week's "Cyber incident" has resulted in a data breach.
Medibank Group took action: they engaged cyber security firms and began "Isolating and removing access to some customer-facing systems to reduce the likelihood of damage to systems or data loss."
On Wednesday, it confirmed the attackers got in touch with claims they have stolen data from the company's systems.
On Thursday, Medibank shared that the sample records the attackers provided as evidence of their claim turned out to be valid.
Medibank has nearly 4 million customers, but it's possible that the data of former customers has also been compromised.
According to The Sydney Morning Herald, the attackers are threatening to contact 1000 of Medibank's most prominent customers with their personal information/diagnoses, before ultimately selling the entirety of the stolen data to third parties.
News URL
https://www.helpnetsecurity.com/2022/10/21/medibank-hack-data-breach/
Related news
- HPE notifies employees of data breach after Russian Office 365 hack (source)
- Fintech giant Finastra notifies victims of October data breach (source)
- US drug testing firm says data breach impacted 3.3 million people (source)
- US drug testing firm DISA says data breach impacts 3.3 million people (source)
- Background check, drug testing provider DISA suffers data breach (source)
- Data breach at Japanese telecom giant NTT hits 18,000 companies (source)
- PowerSchool previously hacked in August, months before data breach (source)
- Western Alliance Bank notifies 21,899 customers of data breach (source)
- Sperm donation giant California Cryobank warns of a data breach (source)
- Pennsylvania education union data breach hit 500,000 people (source)