Security News > 2022 > October > Medibank data breach: More customers affected, attacker got in via stolen credentials
Australian private health insurance provider Medibank has revealed that the hack and data breach it discovered over two weeks ago has affected more customers than initially thought.
According to The Guardian, Medibank is working under the assumption that all its customers have been affected, including past ones.
The company did not say whether they are considering paying the ransom, but they are putting in place services and offerings to support their customers in case the stolen data is leaked by the attacker.
It has set up specialized team to help customers that have received scammy emails or threats as a consequence of this hack, and is "Also working with all Australian banks and relevant government departments to help them take additional steps to increase monitoring of affected customers accounts."
Affected customers will be contacted by Medibank directly but the company made sure to point out that they "Will never contact customers requesting passwords or other sensitive information."
The attacker performed reconnaissance, deployed two backdoors, and exfiltrated customer data by using a bespoke data exfiltration tool.
News URL
https://www.helpnetsecurity.com/2022/10/25/medibank-breach-customers-affected/
Related news
- Dutch Police: ‘State actor’ likely behind recent data breach (source)
- Comcast and Truist Bank customers caught up in FBCS data breach (source)
- ADT discloses second breach in 2 months, hacked via stolen credentials (source)
- Internet Archive hacked, data breach impacts 31 million users (source)
- Internet Archive data breach, defacement, and DDoS: Users’ data compromised (source)
- Fidelity Investments says data breach affects over 77,000 people (source)
- Fidelity Data Breach Exposes Data of Over 77,000 Customers (source)
- USDoD hacker behind National Public Data breach arrested in Brazil (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Insurance admin Landmark says data breach impacts 800,000 people (source)