Through continuing investigation and analysis, we believe the data the criminal has accessed and stolen has been released on the dark web.
If your data was accessed or stolen, you should have received a letter from us detailing what types of data were impacted and what support and advice we are providing.
Remain vigilant with any communications you receive (email, text, phone calls).
If a person contacts you threatening to release your data unless payment is made, please report this immediately to ReportCyber via their website or on 1300 292 371.
If you receive any suspicious emails to texts that may be scams, you can report them to ScamWatch. ScamWatch provides information about what scams may look like and types of scams.
If your data was accessed or stolen, you should have received a letter from us detailing what types of data were impacted and what support and advice we are providing.
If your data was accessed or stolen, you should have received a letter from us detailing what types of data were impacted and what support and advice we are providing.
AFP Commissioner Reece Kershaw made the following statement:
“The AFP believes that those responsible for this cybercrime are in Russia and it will be holding talks with Russian law enforcement about the individuals believed to be involved."
Customers should remain vigilant.
There are a number of resources online which you can find on Staying Safe Online.
We will continue to support all people who have been impacted by this crime through our Cyber Response Support Program, which includes mental health and wellbeing support, identity protection and financial hardship measures.
Medibank experienced a cyber breach in October 2022. The criminal has released files on a dark web forum in December 2022, containing customer data believed to have been stolen from our systems. We recognise the distress this may cause you and we apologise.
The Australian Federal Police put in place a program to help protect Medibank customers whose personal information has been unlawfully released online. They have been actively monitoring the clear, dark and deep web for the sale and distribution of Medibank data. Blackmail is an offence and those who misuse stolen personal information for financial gain face a penalty of up to 10 years’ imprisonment. Law enforcement is committed to taking swift action against anyone attempting to benefit, exploit or commit criminal offences using stolen Medibank data.
If a person contacts you online, by phone or by SMS threatening to release your data unless payment is made, please report this through ReportCyber online or by calling 1300 292 371.
You can change your address, email, password, phone number and payment details quickly and easily using the My Medibank app.
We’ve developed helpful guides on how to:
If you received a scam email or SMS, do not click on any links. To report a scam, please visit Scamwatch.
There are a number of resources online which you can find on Staying Safe Online
Remember, Medibank will never contact you to demand money, ask for your password or sensitive information, or attempt to call you outside of business hours unless by prior arrangement.
At Medibank we use a number of different platforms and email addresses to send through our communications.
Please give close consideration to the sender of any communications you receive.
We will never contact you to demand money, ask for your password or sensitive information, or attempt to call you outside of business hours unless by prior arrangement. If you receive any suspicious emails or texts, you can report them at Scamwatch.
We have also developed helpful resources and advice on protecting your information and being vigilant to scams.
We believe that membership numbers have been accessed or stolen by the criminal.
Rest assured that if you are impacted by this, it will not affect your ability to use your cover.
We are not currently recommending that you need a new membership number.
There are some proactive steps you can take to protect yourself. It is important to remain vigilant with your online security. We encourage customers to review the advice of:
We have also developed helpful resources and advice on protecting your information and being vigilant to scams.
Normal business operations have been maintained for Medibank customers during the event with customers continuing to access health services. No further suspicious activity inside our systems has been detected since 12 October 2022.
Medibank has prioritised preventing unauthorised entry to its IT network and is continuing to monitor for any further suspicious activity. This has included bolstering existing monitoring, adding further detection and forensics capability across Medibank’s systems and network and scaling up analytical support via specialist third parties.
Our dedicated Cyber Response Support Program for our current and former customers and providers includes:
Reach out for support
If you’re feeling distressed or anxious, please reach out. Along with calling the cybercrime health & wellbeing line, you can contact your GP or the following support services:
Beyond Blue (1300 224 636 / beyondblue.org.au)
Lifeline (13 11 14 / lifeline.org.au)
If there is an imminent threat to your safety call Triple Zero.
There has not been any impact for Medibank customers accessing health services. Normal business operations have been maintained during this cyber incident.
Medibank is required by law to retain certain customer (including former customer) information for particular periods of time, generally for 7 years from when a customer leaves us, but in some instances longer.
Our former and current customers can access our dedicated Cyber Response Support Program, which includes:
If you’re feeling distressed or anxious, please reach out. Along with calling the cybercrime health & wellbeing line, you can contact your GP or the following support services:
Beyond Blue (1300 224 636 / beyondblue.org.au)
Lifeline (13 11 14 / lifeline.org.au)
If there is an imminent threat to your safety call Triple Zero.
Find information about how we are providing support for affected customers.
Helpful resources and advice on protecting your information, and being vigilant to scams.
Get the latest updates about the cyber event affecting ahm health insurance.
Leave your details and a Medibank expert will be in touch to take you through your options. In providing your telephone number, you consent to Medibank contacting you about health insurance.
We'll have someone call you soon to help with any questions you have.
Complete this form to express your interest in one of our programs. If you're eligible, a member of our team will call you within 2-3 business days.
What program are you interested in?
Sorry, only members with current Hospital cover are eligible to participate in these programs
Eligible Medibank members with Extras cover are able to access a range of telehealth services included on their cover - you can find out more here. Alternatively, if you would like to talk to one of our team about your cover, we're here on 132 331.
Please provide your details so we can know how to contact you.
By clicking Submit, I understand that Medibank or its subsidiaries may contact me to discuss my eligibility for the Covid-19 Heath Assist program(s), and will disclose my personal information within the Medibank Group of companies and to third party service providers. Please see Medibank’s privacy policy for further information about how Medibank will handle my personal information, and how to contact Medibank: https://www.medibank.com.au/privacy/
If you are eligible, one of our health professionals will call you in 2-3 business days to discuss your situation and help to enrol you in the relevant program.
There is no cost to participate, however some referred services may incur an out of pocket cost.