More Medibank data leaked on dark web as standoff continues

More files exfiltrated from medical insurer Medibank Group during a ransomware attack have been released on the dark web site of the attacker(s). Ransomware generally attacks only systems running Microsoft’s Windows operating system.

Three files that appear to contain details of people with mental health issues, HIV infections and viral hepatitis are among the material claimed to be released overnight.

Data has been released in small amounts since 9 November. Earlier this week, the attacker(s) indicated there would be a pause in the release of data until the company’s annual general meeting was held.

That took place on Wednesday and the company announced that its chief executive David Koczkar and other top bosses would not lose any part of their annual bonuses, worth about $7.3 million.

Medibank said in a statement issued on Sunday that it was aware of the release of fresh data which it said comprised four files containing 1496 records. Of these 123 records were from files released previously.

The #Medibank hackers released more data today. pic.twitter.com/mIkp4CjQWl

— Brett Callow (@BrettCallow) November 20, 2022

“[A total of] 375 of the 1496 records did not match against that policy for that procedure,” the company said. “Previous files released have not matched our records.”

It said the lists included people with chronic conditions such as heart disease, diabetes and asthma, people with cancer, people with dementia, people with mental health conditions, people with infections and people who had sustained injuries, among other conditions.

“Some of the people on the list have had diagnoses that include mental illnesses, or delirium, which is an acute change in mental status that can be triggered by illness, injury, surgery, or medications,” the company added.

The Medibank attack is one of about 10 that have been reported recently and was announced on 14 October. That day, Medibank said there was no indication of any sensitive data having leaked.

Later, it said the data stolen was limited to ahm and international students. Even later, it said data of all its 3.9 million customers could have been taken.

And finally, on 27 October, the company said patient information from My Home Hospital, a joint venture between Calvary and Medibank implemented on behalf of Wellbeing SA and the South Australian Government, had also been accessed by the attacker(s).

ENABLE HYBRID CLOUD & REDUCE NETWORK LATENCY WHITEPAPER

Hybrid cloud promises to bring together the best of both worlds enabling businesses to combine the scalability and cost-effectiveness of the cloud with the performance and control that you can get from your on-premise infrastructure.

Reducing WAN latency is one of the biggest issues with hybrid cloud performance. Taking advantage of compression and data deduplication can reduce your network latency.

Research firm, Markets and Markets, predicted that the hybrid cloud market size is expected to grow from US$38.27 billion in 2017 to US$97.64 billion by 2023.

Colocation facilities provide many of the benefits of having your servers in the cloud while still maintaining physical control of your systems.

Cloud adjacency provided by colocation facilities can enable you to leverage their low latency high bandwidth connections to the cloud as well as providing a solid connection back to your on-premises corporate network.

Download this white paper to find out what you need to know about enabling the hybrid cloud in your organisation.

DOWNLOAD NOW!