11 Nov 2022

Australian police blame Russia-based hackers for attack on Medibank

7:28 pm on 11 November 2022
Hacker using laptop. Lots of digits on the computer screen.

AFP Commissioner Reece Kershaw made a short statement on the Medibank cyber hack situation. Photo: 123RF

Russia-based hackers were behind the cyberattack on insurer Medibank Private Ltd, which compromised the details of just under 10 million current and former customers, Australian Federal Police say.

Australian Federal Police (AFP) Commissioner Reece Kershaw blamed a loosely-affiliated group of cyber criminals likely responsible for other big breaches around the world for the attack on Medibank.

"We believe those responsible for the breach are in Russia," Kershaw said.

The group behind the attack were loosely affiliated with past significant breaches in countries across the world, he said.

"These cyber criminals are operating like a business with affiliate and associates who are supporting the business," he said.

"We also believe that some affiliates may be in other countries."

Kershaw said the AFP knew which individuals were responsible but would not be naming them at this moment.

"To the criminals, we know who you are and moreover, the AFP has some significant runs on the scoreboard when it comes to bringing overseas offenders back to Australia to face the justice system," he said at a short news conference on Friday.

Kershaw said the AFP were scouring the internet and dark web and targeting anyone who was accessing the information and attempting to profit from it.

"This is a time for all Australians, the community, business and law enforcement to stand together and refuse to give these criminals the notoriety they seek," he said.

He also called on businesses to do their part to ensure their systems were protected.

"Cybercrime is the break and enter of the 21st-century and personal information is being used as currency," he said.

He reiterated government policy does not condone paying a ransom as it "feeds a cybercrime business model".

Kershaw said the AFP would be holding talks with Russian law enforcement about the individuals.

Russia's embassy did not immediately respond to questions asking whether it had been in communication with the Australian government over the hack.

- Reuters / ABC

medi