The Office of the Australian Information Commissionaire (OAIC) has launched civil proceedings against Medibank, the Australian health insurance…

← Back to Blog

The Office of the Australian Information Commissionaire (OAIC) has launched civil proceedings against Medibank, the Australian health insurance provider, following its 2022 cyber attack.

The cyber event is a well publicised example of the effects of cyber attacks in Australia and along side the Optus hack, known to have been one of the most significant attacks to have affected the country. Given what is known about the attack, it is of no surprise that Australia’s data regulator is launching civil proceedings against Medibank,

“We allege Medibank failed to take reasonable steps to protect personal information it held given its size, resources, the nature and volume of the sensitive and personal information it handled, and the risk of serious harm for an individual in the case of a breach,” said Commissioner Tydd.

In ones opinion this will be a case to watch closely in Australia. Other regulators including Australia’s Securities and Investment Commission (ASIC) have been successful in prosecuting corporate data breaches. Given the prominence of the Medibank data breach this case will set more legal precedence.

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA

Veritas GRC Medibank ASIC

#cybersecurity #cyberattack #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7204385665864609792