The medical details of up to 3.8 million Australians were taken from the country’s largest private health insurer Medibank, after a criminal stole the login credentials of someone with high-level systems access, and sold them to a separate hacker on a Russian language online forum.
Internal investigators at Medibank have begun piecing together the sequence of events that laid bare its systems to criminals, who now threaten to expose the treatments, ailments and claims of customers, whose records they proved they had stolen.