Medibank
Disclosed Oct 13, 20229,700,000 affectedConfirmed
Extortion attack on health insurer exposes data of 9.7 million people
Attackers accessed data on current and former customers of Medibank and its ahm brand, including health claims data, and leaked records on the dark web after Medibank refused to pay a ransom. The OAIC alleges 9.7 million Australians were affected.
What is known
| People affected | 9,700,000 (as reported by the organization) |
|---|---|
| Disclosed | Oct 13, 2022 |
| Attack | Ransomware |
| Data exposed | NamesDates of birthAddressesPhone numbersEmailsGovernment IDsHealthInsurance |
| Sector | Insurance · AU |
| Status | Confirmed |
| Lawsuit or fine | OAIC civil penalty proceedings in the Federal Court (filed 2024) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.