MediSecure data breach
Was I affected?
MediSecure confirmed a breach affecting about 12.9 million people, exposing names, dates of birth, addresses and phone numbers. Most Australians who were issued an electronic prescription via MediSecure between March 2019 and November 2023 may be affected; individual notices were not sent.
| Announced | May 16, 2024 |
|---|---|
| When it happened | Around April 2024 (data from March 2019 - November 2023) |
| People affected | 12.9 million |
| Data exposed | Names, Dates of birth, Addresses, Phone numbers, Email addresses, Medical information, Health insurance details and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Former Australian e-prescription provider MediSecure said a ransomware attack stole about 6.5 TB of data affecting roughly 12.9 million people whose prescriptions passed through its system between 2019 and 2023. Data included names, contact details, birth dates, Medicare card numbers and prescription details. The company went into administration and said it could not afford to identify and notify each person individually.
What should I do?
- Contact IDCARE (idcare.org, 1800 595 160) for free help, and ask Equifax, Experian and illion for a credit ban if you suspect misuse.
- If you think your Medicare card is being misused, ask Services Australia for a replacement card.
- Treat emails, texts and calls that mention prescriptions, Medicare or MediSecure as suspect; don't click links or share codes, and contact the company through its official app or website.
Check the other services you use →
Sources
- MediSecure data breach affects about 12.9 million Australians · iTnews (news)
- MediSecure data breach impacts 12.9 million individuals · SecurityWeek (news)