NewsBite

Medibank’s legal woes grow with fourth class action

The health insurer says it will defend the latest action, which claims it breached laws and confidence during the cyber attack that exposed millions of customers’ personal details.

Many factors driving Australia’s inflation are ‘not readily solved’ by RBA’s tools

Australia’s biggest health insurer Medibank says it will defend a class action from customers who are seeking compensation from the biggest cyber attack in the nation’s history.

Russian hackers accessed the health records and other personal information from almost 10 million current and former Medibank customers. After the company refused to pay a $15m ransom, it published customer claim data for sensitive conditions – including abortions, drug and alcohol abuse and mental health disorders – on the dark web.

Most of the data released was difficult to understand and link to customers. But lawyers Baker & McKenzie, which are representing customers, allege Medibank breached Australian consumer law over the data heist.

Meanwhile, analysts estimate the clean-up bill – which includes customer lawsuits – could cost Medibank as much as $150m.

A Medibank spokeswoman said the company would defend the class action, which was filed in the Federal Court of Australia on Tuesday.

“Medibank understands that these proceedings have been brought on behalf of current and former customers in relation to the cybercrime,” the spokeswoman said.

“The statement of claim includes allegations of breach of contract, contraventions of the Australian Consumer Law, and breach of equitable obligations of confidence. Medibank will defend the proceedings.”

Medibank will defend a class action from customers who are seeking compensation from the biggest cyber attack in the nation’s history. Picture: Tertius Pickard/NCA NewsWire
Medibank will defend a class action from customers who are seeking compensation from the biggest cyber attack in the nation’s history. Picture: Tertius Pickard/NCA NewsWire

Law firms Maurice Blackburn, Bannister Law and Centennial Lawyers had been pursuing separate actions against Australia’s largest health insurer, but last month entered into a joint co-operation agreement against both Medibank and AHM in relation to the October breach.

Medibank chief executive David Koczkar and other executives kept their bonuses – worth more than $7.3m – despite the health records and other sensitive data of almost 10 million customers, including the Prime Minister, being exposed.

In November, the health insurer’s chair Mike Wilkins defended the group’s handling of one of Australia’s biggest data heists, facing a barrage of questions from shareholders at the company’s annual meeting in Melbourne.

The spokeswoman said Medibank continues to support its customers whose data was exposed during the attack via its Cyber Response Support Program, which includes mental health and wellbeing support, identity protection and financial hardship measures.”

The filing of the class action came on the same day that Medibank deferred its annual premium increase of 2.96 per cent by two months – a move which will cost it $59m.

This takes the total amount of funds returned to members during the pandemic to $1bn – the biggest “financial give back” from any Australian health insurance fund to date.

Medibank group executive, customer portfolios, Milosh Milisavljevic said: “We are committed to ensuring that private health insurance remains affordable and accessible for all Australians.

“With inflation and interest rates continuing to rise, we know that many Australian household budgets are under pressure, which is why we have worked hard to deliver our lowest premium increase in 22 years,” he said.

“Our Covid-19 support package and give back program has now reached a record $1bn. While public health measures implemented during Covid-19 have eased, claims still remain below expected levels, which is why we’re continuing to return savings to our customers.”

The two-month deferral of the premium increase will be applied automatically on April 1 to Medibank and ahm customers who hold an active resident hospital and/or extras policy or an active overseas visitors and workers policy.

“Customers who are no longer active but held an active resident policy between July 1 2022 and March 31 2023 will be eligible for a cash back in lieu of the premium increase deferral,” Medibank said.

Medibank shares closed up 2 per cent on Wednesday at $3.09.

Read related topics:Medibank

Add your comment to this story

To join the conversation, please Don't have an account? Register

Join the conversation, you are commenting as Logout

Original URL: https://www.theaustralian.com.au/business/medibanks-legal-woes-grow-with-fourth-class-action/news-story/b49ce956cb11989f82e055e8aa6892ba