https://www.abc.net.au/news/2024-05-16/health-organisation-part-of-large-scale-r...


16th May 2024    updated 26m ago







MediSecure's website has been pulled, and the company has posted a statement saying it has identified a cyber security incident impacting "the personal and health information of individuals".

The company is a prescription exchange service, which facilitates electronic prescribing and dispensing of prescriptions.

It says it has "taken immediate steps to mitigate any potential impact on our systems", and believes the incident originated from a third-party vendor.

"MediSecure takes its legal and ethical obligations seriously and appreciates this information will be of concern.

"MediSecure is actively assisting the Australian Digital Health Agency and the National Cyber Security Coordinator to manage the impacts of the incident."

Earlier, the National Cyber Security Coordinator Michelle McGuiness was unable to share what company had been affected.

"I am working with agencies across the Australian government, states and territories to coordinate a whole-of-government response to this incident," Lieutenant-General McGuinness said in a statement on social media platform X.

"We are in the very preliminary stages of our response and there is limited detail to share at this stage, but I will continue to provide updates as we progress while working closely with the affected commercial organisation to address the impacts caused by the incident."


The organisation is also working with the Australian Federal Police.

Cyber Security Minister Care O'Neil says she was briefed on the breach, and the government had convened a National Coordination Mechanism.

"Updates will be provided in due course," she said on social media platform X.

"Speculation at this stage risks undermining significant work underway to support the company's response."

In October 2022, Medibank revealed hackers accessed the personal data of all customers across its Medibank, ahm and OSHC brands, affecting millions of Australians.

https://www.medisecure.com.au/

MediSecure
Media/ Public Statement


MediSecure

Cyber security incident/data breach

MediSecure has identified a cyber security incident impacting the personal and health information of individuals. We have taken immediate steps to mitigate any potential impact on our systems.

While we continue to gather more information, early indicators suggest the incident originated from one of our third-party vendors.

MediSecure takes its legal and ethical obligations seriously and appreciate this information will be of concern. MediSecure is actively assisting the Australian Digital Health Agency and the National Cyber Security Coordinator to manage the impacts of the incident. MediSecure has also notified the Office of the Australian Information Commissioner and other key regulators.

MediSecure understands the importance of transparency and will provide further updates via our website as soon as more information becomes available. We appreciate your patience and understanding during this time.

16 May 2024

Bobby. wrote on May 16^th, 2024 at 3:55pm:


Medisecure is a private company motivated by profit. They don't really care about your data, only minimising costs. You would have been safer if the got allowed them to use the digital id system you were all crying about

Bobby. wrote on May 16^th, 2024 at 5:01pm:


you keep giving companies your details you dumbarse

Bobby. wrote on May 16^th, 2024 at 5:16pm:


Right after you apologise for being born

You, Goober, have never apologised for crossposting my mother’s death notice, stealing photos and videos of Socks and trying to blackmail me to post those videos on vile ShiotShute.

These are actions YOU did!

The penalties are not sufficient to increase security in companies
that guard our highly personal data.

Was anyone compensated for having their personal data available
to criminals on the dark web?
Optus never compensated me.

John Smith wrote on May 16^th, 2024 at 10:01pm: