News: MPL Medibank Private Announces Cyber Incident Update

Oct 20 (Reuters) - Medibank Private Ltd (MPL) :

• MEDIBANK CYBER INCIDENT UPDATE RESPONSE
• CYBER INCIDENT IS NOW SUBJECT OF AN INVESTIGATION BY AUSTRALIAN FEDERAL POLICE.
• MEDIBANK HAS BEEN CONTACTED BY A CRIMINAL CLAIMING TO HAVE STOLEN 200GB OF DATA.
• MEDIBANK HAS BEEN CONTACTED BY A CRIMINAL CLAIMING TO HAVE STOLEN 200GB OF DATA
• CRIMINAL PROVIDED SAMPLE OF RECORDS FOR 100 POLICIES WHICH WE BELIEVE HAS COME FROM OUR AHM AND INTERNATIONAL STUDENT SYSTEMS.
• EXPECT THE NUMBER OF AFFECTED CUSTOMERS TO GROW AS THE INCIDENT CONTINUES.
• CRIMINAL CLAIMS STOLEN OTHER INFORMATION, INCLUDING DATA RELATED TO CREDIT CARD SECURITY, NOT YET BEEN VERIFIED BY INVESTIGATIONS
• DATA INCLUDES FIRST NAMES, SURNAMES, ADDRESSES, DATES OF BIRTH, MEDICARE NUMBERS, POLICY NUMBERS, PHONE NUMBERS, SOME CLAIMS DATA
• EXPECT NUMBER OF AFFECTED CUSTOMERS TO GROW AS INCIDENT CONTINUES
• WE WILL CONTINUE TO CONTACT AFFECTED CUSTOMERS
• TO REDUCE WAIT TIMES FOR OUR CUSTOMERS, WE HAVE REDEPLOYED OUR PEOPLE TO SUPPORT NEW CYBER RESPONSE HOTLINES IN OUR CALL CENTRES
• CONTINUE TO WORK AROUND CLOCK TO UNDERSTAND WHAT ADDITIONAL CUSTOMER DATA HAS BEEN AFFECTED, AND HOW THIS WILL IMPACT THEM
• IS WORKING WITH SPECIALISED CYBER SECURITY FIRMS, AUSTRALIAN CYBER SECURITY CENTRE AND GOVERNMENT STAKEHOLDERS