Medibank confirmed on Thursday that the risk actors behind the devastating cyberattack launched one other dump of knowledge stolen from its methods on the darkish net after it refused to pay a ransom.
“We’re within the means of analyzing the information, however the revealed information seems to be the information we believed the prison had stolen,” the Australian well being insurer mentioned.
“Whereas our investigation continues, there are at the moment no indicators that any monetary or banking information has been taken. And the non-public information stolen, by itself, isn’t enough to allow identification fraud and The uncooked information we now have analyzed up to now is incomplete and obscure.”
The leak comes almost a month after the corporate acknowledged that non-public information belonging to round 9.7 million of its present and former prospects was accessed following a ransomware incident in October 2022.
This consists of 5.1 million Medibank prospects, 2.8 million ahm prospects and 1.8 million worldwide prospects. The well being claims of roughly 160,000 Medibank prospects, 300,000 ahm prospects and 20,000 worldwide prospects have been additionally consulted.
The newest dataset, which was downloaded as six ZIP archive recordsdata, consists of info on well being claims, though Medibank famous that a lot of the information is fragmented and unclear. isn’t mixed with buyer names and get in touch with info.
The attackers are believed to be situated in Russia and linked to the REvil ransomware group, which staged a comeback in early Might.
“Our intelligence factors to a loosely affiliated group of cybercriminals who’re doubtless answerable for vital previous breaches in international locations around the globe,” Australian Federal Police (AFP) Commissioner Reece Kershaw mentioned final month.
The event additionally coincides with the announcement by the Workplace of the Australian Data Fee (OAIC) of an investigation into Medibank’s information dealing with practices in relation to the safety incident.
An identical investigation is already underway with telecoms large Optus, which suffered a breach in late September 2022, to find out whether or not the corporate “took cheap steps to guard the non-public info it held from misuse, interference , loss, unauthorized entry, modification or disclosure”. .”
The mega-breaches have additionally prompted the Australian authorities to cross new laws that may topic firms to fines of as much as A$50 million for repeated or extreme information breaches.
Supply : https://information.google.com/__i/rss/rd/articles/CBMiS2h0dHBzOi8vdGhlaGFja2VybmV3cy5jb20vMjAyMi8xMi9oYWNrZXJzLWxlYWstYW5vdGhlci1zZXQtb2YtbWVkaWJhbmsuaHRtbNIBUWh0dHBzOi8vdGhlaGFja2VybmV3cy5jb20vMjAyMi8xMi9oYWNrZXJzLWxlYWstYW5vdGhlci1zZXQtb2YtbWVkaWJhbmsuaHRtbD9hbXA9MQ?oc=5
