Sanctions imposed and security upgrades pursued after Medibank data breach
Australia's Medibank suffered a personal data breach in a 2022 cyber-attack. The regulator alleged that stolen credentials and a lack of multi-factor authentication enabled the intrusion and that the response was also delayed. Australia and other countries imposed sanctions on a Russian hacker involved, and Medibank decided to invest A$126 million in security improvements after the incident.
Key facts
- Affected organisation
- Medibank
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Regulator's allegation of system intrusion via stolen credentials and lack of multi-factor authentication
- Location
- Australia
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Australia imposed sanctions on Russian national Aleksandr Ermakov in connection with the 2022 Medibank attack.
- Sanctions by the US, UK and Australia on a hacker linked to the Medibank breach were reported.
- Medibank faced new legal proceedings raising the possibility of fines of up to A$21.5 trillion.
- Allegations were made that stolen credentials, a lack of multi-factor authentication and a delayed response caused the incident.
- Medibank decided to invest A$126 million in security improvements after the incident.
- Australia announced additional cyber sanctions related to the Medibank attack.
20 related reports
- Australian-first sanctions target Russian accused of Medibank hack
- Federal government names Russian citizen in relation to Medibank cyberattack as sanctions are levelled
- Australia sanctions Russian citizen Aleksandr Ermakov over 2022 Medibank cyber-attack
- Medibank hack: Russian sanctioned over Australia's worst data breach
- US, UK, Australia sanction REvil hacker behind Medibank data breach
- Australia Blames Russian Hacker for Major Cyber Attack
- Aleksandr Ermakov: Australia sanctions Russian hacker over Medibank cyberattack
- Russian hacker Aleksandr Ermakov linked to prominent 2022 Australia data breach
- Named and shamed: For the first time, Australia enforces cyber sanctions against Medibank hacker
- Compensation for Medibank hack victims could be fast-tracked
- Medibank faces maximum $21.5 trillion fine in new cyber hack case
- The absence of a basic cybersecurity measure led to the Medibank hack, regulator alleges
- Medibank’s lack of multi-factor authentication allowed hackers to infiltrate systems, regulator alleges
- Scathing report on Medibank cyberattack highlights unenforced MFA
- Inside the Medibank hack: Stolen credentials, no MFA, and a slow response allegedly to blame
- Australian regulator blames lack of multi-factor authentication for Medibank hack
- Medibank allegedly failed to heed IT warnings before one of Australia's worst cybersecurity breaches
- Medibank to Spend AU$126M on Post-Breach Security Upgrade
- Sanctions Target Russian Host for Role in Ransomware Attacks
- Further cyber sanctions in response to Medibank Private cyberattack
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.