Medibank hacker release more private data

The Medibank Hacker has re-emerged today releasing stolen private health information on the dark web.

The Russian cybercriminals group dumped the fifth tranche of customer-sensitive information on the dark web overnight after the company refused earlier this month to pay a $US10 million ($A15 million) ransom to get it back.

Medibank CEO David Koczkar said we are doing everything we can to make sure our customers are supported.

“We will continue to support all people who have been impacted by this crime through our Cyber Response Support Program. This includes mental health and wellbeing support, identity protection and financial hardship measures,” Mr Koczkar said.

“If customers are concerned, they should reach out for support from our cybercrime hotline, our mental health support line, Beyond Blue, Lifeline or their GP.

"Anyone who downloads this data from the dark web, which is more complicated than searching for information in a public internet forum and attempts to profit from it is committing a crime.

“The Australian Federal Police have said law enforcement will take swift action against anyone attempting to benefit, exploit or commit criminal offences using stolen Medibank customer data. We continue to work closely with the Australian Federal Police who are focused, as part of Operation Guardian, on preventing the criminal misuse of this data.

“Again, I unreservedly apologise to our customers.

“We remain committed to fully and transparently communicating with customers and we will continue to contact customers whose data has been released on the dark web,” he said.

Data released on the dark web, according to Ms Emily Ritchie, Medibank Senior Executive External Affairs, 4 files containing 1,496 records, 123 records are from previous files released.

She said 375 of the 1,496 records do not match that policy for that procedure. These lists included people with chronic conditions such as heart disease, diabetes and asthma, people with cancer, people with dementia, people with mental health conditions, people with infections and people who have sustained injuries, amongst other conditions.

Some of the people on the list have had diagnoses that include mental illnesses, or delirium, which is an acute change in mental status that can be triggered by illness, injury, surgery, or medications.

Treasurer Jim Chalmers said the hacking group's behaviour was despicable.

"These people are complete grubs - pure and simple," he said on Sunday in Brisbane.

"We've all got an interest in stamping out this despicable, despicable, grubby act of the kind that we've seen overnight."

“ We encourage all Australians to seek medical care for any physical or mental health conditions that impact them, free from any shame or stigma”, Medibank CEO David Koczkar said.

Medibank also reminded customers impacted by the data theft they can get help through its Cyber Response Support Program.

Medibank continues to reach out to affected customers, offering direct support, while the AFP continues their investigation into the hackers.