Group threatens to sell Medibank customer data after cyber attack
Australia's spy agency is helping Medibank Private deal with the fallout from the cyber attack it has suffered.
The health insurer today entered a trading halt after announcing a group claiming to have hacked customer data had threatened to sell it unless the insurance company paid a ransom.
Home Affairs and Cyber Security Minister Clare O'Neil tonight said she'd spoken with Medibank CEO David Koczkar and the heads of the Australian Signals Directorate and the Australian Federal Police.
READ MORE: Father dies after waiting for paramedics as Victoria's ambulance crisis worsens
Cyber Security Minister Clare O'Neil she'd spoken with Medibank CEO David Koczkar and the heads of the Australian Signals Directorate and the Australian Federal Police. A Current Affair
"Medibank is cooperating with government in responding to this incident," she said, in a statement describing the cyber security incident as "significant".
"Significant support has been provided by the Australian Signals Directorate's Australian Cyber Security Centre, and the Department of Home Affairs."
"My department is working with all relevant agencies across government."
Medibank said it received messages from a group wishing to negotiate with the provider "regarding their alleged removal of customer data".
"This is a new development and Medibank understands this news will cause concerns for customers and the protection of their data remains our priority," Medibank said in a statement.
READ MORE: The Sydney suburbs with the worst pothole problems
Medibank is investigating claims of customer data being held for ransom. AAP
"Medibank is working urgently to establish if the claim is true, although based on our ongoing forensic investigation we are treating the matter seriously at this time."
In a message, the hacking group claimed to have stolen 200 gigabytes of sensitive information and threatened to send the insurer's 1000 most-prominent customers their own data, as a warning, according to the Sydney Morning Herald.
Medibank said its systems remained operational for customers but halted trading on the Australian Stock Exchange as a result of the threat.
"Medibank has entered into a trading halt, to ensure that it meets its continuous disclosure obligations. The trading halt will continue until further notice," Medibank said.
Medibank shares last traded at $3.50.
It is the second time in a week the provider has been forced to stop trading.
READ MORE: Aussie top guns headhunted by China
Medibank announced last week that it was hit by a cyber incident. Photograph by Chris Hopkins
The insurer added it is working with cyber security firms and the Australian Cyber Security Centre to get to the bottom of the cyber incident.
"I apologise and understand this latest distressing update will concern our customers," Koczkar said.
"We have always said that we will prioritise responding to this matter as transparently as possible.
"Our team has been working around the clock since we first discovered the unusual activity on our systems, and we will not stop doing that now.
"We will continue to take decisive action to protect Medibank customers, our people and other stakeholders."
READ MORE: Study finds worrying news for people who sleep less than five hours
Medibank announced last week it had been hit by a "cyber incident" but reassured customers their personal data remained safe.
No such reassurance was provided by the health insurer to customers today.
The incident comes just weeks after the major Optus hack which exposed at least 2.1 million personal identification numbers.
Share a tip-off, video or photo with us
