MediSecure data of nearly 13-million Australians appears to have been sold on dark web
The ABC can reveal that the highly sensitive medical data of nearly 13 million Australians, as well as their personal details, is now marked as 'sold' on the dark web. The trove, stolen from e-scripts provider MediSecure, has been listed for sale twice now following a major ransomware hack on the company last year.
Category
đŸ“º
TVTranscript
00:00Jamie O'Reilly is a hacker.
00:02This is what we call the Bat Cave.
00:04It's just a place away from the office where we can come and, you know,
00:08spend late nights and hack away on different things.
00:11But his focus is preventing attacks like the one on MediSecure.
00:15Put simply, I hack banks and governments around the world
00:19to help them protect themselves before the bad guys do.
00:22And even hackers have trouble keeping their personal data safe.
00:27I have used e-script type applications on my mobile to get e-scripts.
00:32It's fair to say my data could be there.
00:35There's a good chance the data of nearly 13 million Australians
00:38has been bought by cybercriminals for just $50,000.
00:43The data that they originally had posted has allegedly been sold.
00:47Now another ad's been listed offering the same data at half the price.
00:52Here this is a separate form.
00:54They're saying that it's already been sold once
00:57and they're lowering the price to $25,000.
01:00That means the data of 1,000 Australians for just $2.
01:046.5 terabytes all up, including names, numbers, birthdays, addresses and emails.
01:11There's also Medicare and concession cards,
01:14plus sensitive information like the drugs people are prescribed and why.
01:19When it comes to the dark web, it's impossible to know for sure
01:22if the data gathered in thousands of pharmacies like this one
01:25has in fact been sold.
01:27What we do know is that with every breach,
01:29the risk to everyday Australians is magnified.
01:33Bad actors, data brokers and others can now start to piece together
01:37the personal information that has been leaked on Australians
01:41through multiple data breaches.
01:43Leaving them more vulnerable than ever before.