News: MPL Medibank Private Updates On Cybercrime Incident

Nov 7 (Reuters) - Medibank Private Ltd (MPL) :

• MEDIBANK CYBERCRIME UPDATE
• WILL NOT PAY ANY RANSOM DEMAND FOR THIS DATA THEFT
• BUSINESS OPERATIONS HAVE BEEN MAINTAINED
• UPDATES WHAT CUSTOMER INFORMATION IT BELIEVES HAS BEEN ACCESSED AND STOLEN BY CRIMINAL
• ANNOUNCES AN EXTERNAL REVIEW OF CYBERATTACK
• NO RANSOM PAYMENT WILL BE MADE TO CRIMINAL RESPONSIBLE FOR THIS DATA THEFT.
• THERE IS ONLY A LIMITED CHANCE PAYING A RANSOM WOULD ENSURE RETURN OF OUR CUSTOMERS' DATA AND PREVENT IT FROM BEING PUBLISHED
• PAYING RANSOM COULD HAVE OPPOSITE EFFECT AND ENCOURAGE CRIMINAL TO DIRECTLY EXTORT OUR CUSTOMERS
• CRIMINAL ACCESSED NAME, DATE OF BIRTH, ADDRESS, PHONE NUMBER AND EMAIL ADDRESS FOR AROUND 9.7 MILLION CURRENT AND FORMER CUSTOMERS
• NOW BELIEVE THAT ALL OF CUSTOMER DATA ACCESSED COULD HAVE BEEN TAKEN BY CRIMINAL
• CUSTOMERS SHOULD REMAIN VIGILANT AS CRIMINAL MAY PUBLISH CUSTOMER DATA ONLINE
• NORMAL BUSINESS OPERATIONS HAVE BEEN MAINTAINED DURING THIS CYBERCRIME EVENT
• CONTINUES TO WORK WITH AUSTRALIAN GOVERNMENT, INCLUDING AUSTRALIAN CYBER SECURITY CENTRE AND AUSTRALIAN FEDERAL POLICE
• HAS PRIORITISED PREVENTING FURTHER UNAUTHORISED ENTRY TO ITS IT NETWORK AND IS CONTINUING TO MONITOR FOR ANY SUSPICIOUS ACTIVITY