[ad_1]
A blackmailer on Wednesday released Medibank customer data, including details of personal medical procedures, after Australia’s largest health insurer refused to pay a ransom for the personal records of nearly 10 million current and former customers.
One company said the information posted on the dark web appeared to be a sample of data previously identified by Medibank as stolen last month. Medibank expects thieves will continue to release data.
“This is a criminal act designed to harm and cause distress to our customers,” Medibank chief executive David Koczkar said in a statement, which reiterated a previous apology to customers.
“We take our responsibility to protect our customers seriously and stand ready to support them,” he added.
Medibank’s customer, Prime Minister Anthony Albanese, whose personal data was stolen, welcomed the company’s refusal to pay the hackers to return the records.
“It’s really hard for people. I’m also a Medibank Private customer and some information has been made public, which would be concerning,” Albanese told reporters, referring to the Medibank brand.
“The company has effectively followed the guideline, which is the recommendation not to pay the ransom. If you go down this path, then you may end up with more difficulties on a larger scale,” Albanese added.
Thieves have reportedly threatened to disclose the diagnosis and treatment of high-profile customers unless an undisclosed amount of ransom is paid, but Medibank believes there is “only a limited chance” that the ransom will prevent the data from being released.
“The data will be released within 24 hours (sic),” a blogger named “Ransomware Gang” posted on the dark web on Monday night.
Medibank this week updated its estimate of the number of stolen personal information to 9.7 million, up from 4 million two weeks ago. The company said the stolen data included nearly half a million people’s health claims, including diagnosis and treatment.
(Disclaimer: This story was automatically generated from the syndicated feed; only images and titles may have been www.republicworld.com)
[ad_2]
Source link