The
Office of the Australian Information Commission (OAIC), the
country's privacy regulator, has also begun investigating how
the company handles personal information, Medibank said in a
statement.
The latest release on the dark web follows progressive uploads,
including records of customers' mental health and alcohol use,
that began after Medibank said on Nov. 7 it would not pay a
ransom.
"The raw data we have analysed today so far is incomplete and
hard to understand," chief executive David Koczkar said. "While
there are media reports of this being a signal of 'case closed',
our work is not over."
On Thursday, the media reported that a blog, believed by cyber
experts to be used by the hackers, carried a new post: "Happy
Cyber Security Day!!! Added folder full. Case closed." It also
included a file that had several compressed files amounting to
more than 5 gigabytes.
Reuters has not verified the contents of the latest files
uploaded on the dark web, part of the World Wide Web that is
accessible only with a special software.
Medibank did not immediately respond to a Reuters question
whether it believed all stolen data had now been released.
Australian Federal Police last month said Russia-based hackers
were behind the Medibank cyberattack, which compromised the
details of almost 10 million current and former customers.
Medicare revealed the breach on Oct. 13.
In an update on Thursday morning, Medibank said there were
currently no signs that banking data had been stolen. Personal
details accessed by hackers were not enough to enable financial
fraud, it added.
Six zipped files placed in a folder called "full" and containing
raw data believed to have been stolen had been uploaded,
Medibank said in a statement.
Australia has been grappling with a recent rise in cyber
attacks. At least eight companies, including telecoms company
Optus, owned by Singapore Telecommunications, have reported
breaches since September.
The OAIC, which is also investigating Optus over the breach, did
not immedietely respond to a Reuters request for comment on the
Medibank investigation.
Technology experts have said Australia has become a target for
hackers just as a skills shortage leaves an understaffed,
overworked cybersecurity workforce ill-equipped to stop attacks.
(Reporting by Renju Jose in Sydney, Himanshi Akhand and Harshita
Swaminathan in Bengaluru; Editing by Shailesh Kuber, Bradley
Perrett and Sherry Jacob-Phillips)
[© 2022 Thomson Reuters. All rights
reserved.]
This material may not be published,
broadcast, rewritten or redistributed.
Thompson Reuters is solely responsible for this content.
|
|