Cyber Incident Review: Medibank 2022 Cyber Breach

On 12th November 2022, Medibank/ahm experienced a data incident where unusual activity was detected on the corporate network.

The incident was a result of a ransomware threat.

The way in appears to have been through compromised credentials of someone with high-level access to Medibank’s systems. The credentials were obtained by a third party and then sold to the hackers. In short, human error (passwords) resulted in an estimated 200GB of data being stolen, compromising the data of 9.7 million individuals.

This guide provides an overview of this significant breach, how it occurred, and Medibank’s response and explains what to do if your information was potentially exposed.