Medibank
Disclosed Oct 13, 20223 years ago9,700,000 affectedConfirmed
Extortion attack on health insurer exposes data of 9.7 million people
Attackers accessed data on current and former customers of Medibank and its ahm brand, including health claims data, and leaked records on the dark web after Medibank refused to pay a ransom. The OAIC alleges 9.7 million Australians were affected.
What is known
| People affected | 9,700,000 (as reported by the organization) |
|---|---|
| Disclosed | Oct 13, 2022 |
| Attack | Ransomware |
| Data exposed | Names, Dates of birth, Addresses, Phone numbers, Emails, Government IDs, Health, Insurance |
| Sector | Insurance · AU |
| Status | Confirmed |
| Lawsuit or fine | OAIC civil penalty proceedings in the Federal Court (filed 2024) |
Sources
| Source | |
|---|---|
| Medibank breach: Hackers start leaking health data after ransomware attacktechcrunch.com · News | News |
| OAIC takes civil penalty action against Medibankoaic.gov.au · Regulator | Regulator |
| Medibank reveals hack could affect all of its 3.9 million customerstheguardian.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Oct 13, 2022 | 9,700,000 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.