AU health insurance provider, 9.7 million affected?

[Quackers101]

Summary

From what Medibank from australia saw as "baseless claims" or threats, before the hackers gave out personal information and that they were serious.

It's unsure how they got it? and a lot of personal + gov ID, medical information and so on. Maybe no credit information stolen.

 

Quotes

Quote

We have become aware that the criminal has released files on a dark web forum containing customer data that is believed to have been stolen from Medibank’s systems.

This data includes personal data such as names, addresses, dates of birth, phone numbers, email addresses, Medicare numbers for ahm customers (not expiry dates), in some cases passport numbers for our international students (not expiry dates), and some health claims data.

 

My thoughts

lol, another one.

 

Sources

https://www.medibank.com.au/health-insurance/info/cyber-security/

https://www.bbc.com/news/world-australia-63564544

[Heats with Nvidia]

Yay for centrally hosted databases with sensitive information from millions of people on them!

[Birblover12]

You would have thought, that with the amount of money the world's governments have, they'd invest in protecting the most expensive thing they own (their citizen's data/info). Like seriously, all it takes is a few hours with some job posts and a few million dollars and they could easily protect the sensitive stuff better.

[Heats with Nvidia]

9 minutes ago, Birblover12 said:

You would have thought, that with the amount of money the world's governments have, they'd invest in protecting the most expensive thing they own (their citizen's data/info). Like seriously, all it takes is a few hours with some job posts and a few million dollars and they could easily protect the sensitive stuff better.

Yes, but the way the incentive structures are right now, data security is at best an afterthought. Just an example from my country. What do you think, how long did it take to find a critical flaw in our digital Personalausweis (Our form of government ID-card) after it was published?

Spoiler

about half an hour

And that is what you should be abled to use when you need identification for tasks like opening a bank account, filing taxes etc...

 

Thats also one of the reasons almost nobody actually uses it although it would be useful if it were at least a little bit trustworthy.

So why should companies invest in data security when the government doesn and nothing happens after a hack. Security costs money without a perceptible benefit for them.

[williamcll]

45 minutes ago, Birblover12 said:

You would have thought, that with the amount of money the world's governments have, they'd invest in protecting the most expensive thing they own (their citizen's data/info). Like seriously, all it takes is a few hours with some job posts and a few million dollars and they could easily protect the sensitive stuff better.

No, the money is spent on physical defenses to fuel the war economy.

[Arika]

BBC slow on the uptake, this is like 3 weeks old

[Heats with Nvidia]

7 minutes ago, williamcll said:

No, the money is spent on physical defenses to fuel the war economy.

We are talking about an amount of money that wouldn`t put much of a dent in most defence budgets while hardening their defences a lot. So even from a defence standpoint it would make sense to invest it. But the focus is more on getting all the data of every single person on the planet for the secret services than protecting at least the data of their own citizens.

 

Also i don`t think the military of the australian Medibank is really big.

[Spotty]

@Quackers101 Your thread title isn't clear what the topic is about, I think you're missing the word "hacked" or "data breach" in there. You also need to update to include some of your own thoughts, commenting "lol" is not enough.

• The title of your thread must be relevant to the topic and should give a reader a good idea of the contents of the thread. Copying the title of the source is permitted but absolutely not required. It should be to the point and not be done in such a way as to mislead a reader, such as clickbait, etc.
• Your thread must include some original input to tell the reader why it is relevant to them, and what your personal opinion on the topic is. This needs to be MORE than just a quick, single comment to meet the posting guidelines.

[Dredgy]

2 hours ago, Arika S said:

BBC slow on the uptake, this is like 3 weeks old

The compromised data was just released today.