Australian insurer Medibank victim of a massive cyber attack

In October 2022, Medibank, one of Australia's largest private health insurance providers, fell victim to a cyber attack.

Hackers were able to access the personal data (names, passport numbers, dates of birth, addresses, ...) of 9.7 million customers.

On 10 November 2022, the hackers released the data before sharing it the next day on a Dark Web forum, which is not accessible via traditional browsers.

The first leaked information targeted people being treated for drug or alcohol addiction, sexually transmitted infection or termination of pregnancy.

The cybercriminal group demanded a 10 million USD ransom that the Australian insurer still refuses to pay.

The police claim to know the names of the hackers but refuse to disclose them. Steps are being taken to bring the criminals to justice.