Australia
AUS
Medibank cyber intrusion suspends ahm and overseas-student policy-management services
After malicious activity was detected on 12 October 2022, Medibank temporarily isolated its ahm and international-student insurance policy-management systems. Customers and contact-centre staff could not access policy information until restoration on 14 October. The organization later confirmed unauthorized access and data theft, but specifically stated that its systems were not encrypted by ransomware and that access to healthcare providers continued.
70
Estimated severity
70 / 100
97
Source reliability
97 / 100
Approximate Date
2022-10-12
Targeted Company
MEDIBANK
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Australia
Affected countries
Australia
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service degradationService unavailability
Affected sectors
Finance & Insurance
Affected departments
Customer ServiceInformation Technology
Attack Profile
Attack types
Data exfiltrationExtortionUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
medibank.com.auhttps://www.medibank.com.au/livebetter/newsroom/post/medibank-cyber-incidentmedibank.com.auhttps://www.medibank.com.au/livebetter/newsroom/post/medibank-cyber-incident-and-trading-updateminister.homeaffairs.gov.auhttps://minister.homeaffairs.gov.au/ClareONeil/Pages/press-conference-20102022.aspxmedibank.com.auhttps://www.medibank.com.au/livebetter/newsroom/post/cyber-incident-update