"Hackers Dump Australian Health Data Online, Declare Case Closed"

In November, hackers demanded health insurer Medibank pay US$9.7 million to keep the records stolen off the internet, or one dollar for each of the company's impacted customers, which included Prime Minister Anthony Albanese.   Medibank refused to pay the ransom.  The first batches of stolen data started appearing on a dark web forum on November 9, in curated posts highlighting medical records about drug addiction, pregnancy terminations, and sexually transmitted infections.  The hackers leaking stolen Australian health records to the dark web on Thursday appeared to end their extortion attempt by dumping a final batch of data online and declaring: "Case closed." The post was posted on Thursday deliberately because it was International Computer Security Day.  4Medibank stated that the latest post was "incomplete and hard to understand," an indication the hackers may have lost interest after a ransom was taken off the table.  The company stated that while its investigation continues, there are currently no signs that financial or banking data has been taken.  Australian Federal Police Commissioner Reece Kershaw said in November that the hackers were believed to be a group of "loosely affiliated cyber criminals" based in Russia.   Cybersecurity analysts have suggested they could be linked to the Russian hacker group REvil. 

SecurityWeek reports: "Hackers Dump Australian Health Data Online, Declare Case Closed"