Medibank hackers declare to have leaked the final set of stolen recordsdata

[ad_1]

The rest of the shopper knowledge stolen within the Medibank ransomware assault seem to have been revealed on-line.

REvil, the group behind the assault on the Australian well being insurer, posted an replace on its weblog earlier this week, stating “Blissful Cyber Safety Day!!! Added folder full. Case closed”, TechCrunch reported.

Since publishing the submit, the weblog has been unavailable, making it unimaginable to independently verify the authenticity of the recordsdata that had been posted. Nonetheless, Medibank mentioned the folder hosted six uncooked knowledge recordsdata, zipped to an archive. In whole, six gigabytes of knowledge had been posted, making this the only largest Medibank leak to date.

No monetary knowledge taken

It mentioned it was analyzing the information that was posted, however added that it “seems to be the information we believed the felony stole”.

“Whereas our investigation continues there are presently no indicators that monetary or banking knowledge has been taken. And the private knowledge stolen, in itself, shouldn’t be adequate to allow identification and monetary fraud. The uncooked knowledge we’ve analyzed right now to date is incomplete and arduous to grasp,” Medibank posted in an replace.

The corporate concluded that it expects REvil to proceed releasing recordsdata on the darkish internet, regardless of the group’s claims that the whole lot has already been leaked.

Medibank fell sufferer to the ransomware assault in late October 2022, by the hands of REvil, a bunch with alleged ties to the Russian authorities.

After the preliminary investigation, it was mentioned that data on 9.7 million prospects was taken from firm endpoints (opens in new tab), in addition to well being claims knowledge referring to half one million others.

The corporate’s CEO, David Koczkar, later clarified through LinkedIn the kind of knowledge that was taken: “The felony didn’t entry bank card and banking particulars or well being claims knowledge for extras providers,” he mentioned.

It could later prove that REvil acquired its arms on buyer’s names, start dates, passport numbers, data on medical claims and delicate recordsdata associated to abortions and alcohol-related sicknesses. It additionally demanded $9.7 million in ransom, a greenback for every buyer.

Through: TechCrunch (opens in new tab)

[ad_2]

Source link