Medibank hit with hacking class action amid threat to release data ‘in 24 hours’

The alleged hacker said: “Data will be publish in 24 hours. P.S I recommend to sell Medibank stocks.”

There is no evidence to suggest this is the actual hacker. Medibank has been approached for comment on whether the threat is credible.

The private health insurer said on Monday that it will not pay the ransom demanded by the hackers after receiving advice from cyber security experts.

“All the advice is that paying does not guarantee that the data will be returned. It dramatically increases the chance of people being exploited and more Australians being at risk,” Medibank chief executive David Koczkar, said.

Loading

Cybersecurity Minister Clare O’Neil welcomed the decision.

Koczkar said the group was unaware of any cases where the hack has been linked to cybercrime directed against customers, but it was bracing for the possibility that this exploitation might now start with its refusal to pay.

This could occur via the publishing of customer data online or an attempt to contact customers directly.

“I encourage any customer who actually has their data compromised – because we have no evidence of that data being released externally – then please get in touch with us. Or, with the government through Report Cyber,” he said.

Medibank has reiterated that no credit card details were stolen.

On Monday, Medibank also announced it would commission an external review with more details to be announced in the near future. It said details would be made public where appropriate.

The Business Briefing newsletter delivers major stories, exclusive coverage and expert opinion. Sign up to get it every weekday morning.