Highlights:
- Medibank has received additional files from the cyber-criminal on 25 October 2022.
- The company said that it was too early to ascertain the full extent of the data breach.
- Medibank shares are expected to start normal trading on 26 October 2022.
Private health insurance company Medibank Private Limited (ASX:MPL) on Tuesday (25 October 2022) shared an update about the cyber hack which was reported on 13 October 2022 via an ASX-filling. The company has been continuously providing updates regarding the cyber incident in which ahm (Australian Health Management Group Ltd.), international student customer data and Medibank data were stolen.
Medibank shares last traded at AU$3.50 apiece. Reportedly, the sharers are expected to commence normal trading on 26 October 2022 or after the release of a pending announcement, which occurs earlier.
What cybercrime update has been shared by Medibank
Medibank has revealed that the cyber hack was much wider than was earlier anticipated. Medibank informed the market that it has received additional files from the criminal. The files included,
- 1,000 ahm policy records which include health claims and personal data.
- Additional ahm, international student customer, and Medibank data.
Medibank also said in a statement that it was too early to ascertain the full extent of the data that has been stolen.
What data has been stolen by the cybercriminal
On 20 October 2022, the company shared that the criminal had contacted them and claimed that 200 GB of data had been stolen. The criminal had shared a sample of records of 100 policies. The data included some customer details and some claim data.
According to ASX announcement, the criminal also claimed to have stolen data related to credit card security. The company said that this was not yet verified in the investigation. Australian Federal Police (AFP) is handling the investigation of this cyber incident.
What is Medibank doing?
The health insurance provider was expected to declare a comprehensive customer support package. It would include:
- 24/7 well-being and mental health support
- Support to those customers who are in a vulnerable position.
- Availability of specialist identity protection advice with IDCARE for all consumers.
The company is expected to defer premium increases for ahm and Medibank customers until 16 January 2023.
In addition to assisting AFP in the investigation, the company is also engaged with the Australian Cyber Security Centre, a specialised cyber security firm and government stakeholders.
Management Commentary
David Koczkar, CEO, Medibank, commented on the development,