MediSecure: Ransomware gang stole data of 12.9 million people

MediSecure disclosed a large-scale ransomware attack discovered on 13 April 2024 that encrypted a database server and led to the theft of about 6.5 TB of data. Approximately 12.9 million Australians who used the service between March 2019 and November 2023 were impacted, with exposed data including names, dates of birth, contact details, healthcare identifiers, Medicare and concession card numbers, prescription details, and other sensitive health information; MediSecure restored a full backup by 17 May 2024 and engaged the Australian National Cyber Security Coordinator and IT specialists.