Medibank, Australia's biggest health insurer, had a data breach by REvil ransomware group that lead to the loss of 4 million customer records in 2022.
The Australian Information Commissioner are taking legal action against them, and the court case contains a lot of details:
https://www.oaic.gov.au/__data/assets/pdf_file/0025/221974/AIC-v-Medibank-Private-Limited-concise-statement.pdf
Thread:
- Initial access was via an infostealer on a home PC
- Their Palo-Alto GlobalProtect VPN allowed just username and password access
Kevin Beaumont /
npub176…fkwlw
2024-06-17 16:00:45
Author Public Key
npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlwPublished at
2024-06-17 16:00:45Event JSON
{
"id": "415935841d008c44d11e646fbb03766bfe99b4b55103e0e57696ee5c26e8ee29",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1718632845,
"kind": 1,
"tags": [
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/112632322170843431",
"activitypub"
]
],
"content": "Medibank, Australia's biggest health insurer, had a data breach by REvil ransomware group that lead to the loss of 4 million customer records in 2022.\n\nThe Australian Information Commissioner are taking legal action against them, and the court case contains a lot of details:\n\nhttps://www.oaic.gov.au/__data/assets/pdf_file/0025/221974/AIC-v-Medibank-Private-Limited-concise-statement.pdf\n\nThread:\n\n- Initial access was via an infostealer on a home PC\n\n- Their Palo-Alto GlobalProtect VPN allowed just username and password access",
"sig": "80b80b5c43ffb5490d478515bd39544c8cd30cdfe18ffc5920611cc833a86f2f7a027696335d50678e73ede98bbb34c8e299b42428b460d89e7c9533d914fc9f"
}