The 2022 security breach will cost Medibank $26 million for the half-year. It is anticipated to increase to a range of $40 million to $45 million for the entire year.For the first time, the insurer has publicly disclosed technical details of the attack.
According to a half-year results announcement [pdf), Medibank revealed that the attacker initially acquired the user ID and password utilized by a third-party IT services contractor.
Usernames and password to gain access
The attacker managed to bypass the requirement for “an additional digital security certificate”. They access Medibank’s systems by exploiting a misconfigured firewall, using the previously acquired credentials.
Medibank stated that “The criminal was able to obtain further usernames and passwords to gain access to a number of Medibank’s systems and their access was not contained.”
On October 11, the attack set off a security alert, and Medibank reported no additional access after October 12. Medibank CEO, David Koczkar, stated that in December, the company executed “Operation Safeguard.’’ That involved taking their systems offline to reinforce security measures.
18 million perimeter attacks daily
Furthermore, the insurer has confirmed that they have now configured all firewalls securely. Koczkar added that they are currently fending off over 18 million perimeter attacks daily. They will continue to enhance their security environment.
Koczkar stated that they have expanded both internal and third-party security monitoring.Medibank will also be reviewing their data management protocols. Especially in light of possible modifications to the Privacy Act. Koczkar noted that after the attack, Medibank experienced a loss of 13,000 subscribers. However,they have since begun to recover in terms of customer acquisition.
The breach also serves as a reminder of the potential financial impact of cyberattacks.Both in terms of direct costs and reputational damage. As a result, companies must take cybersecurity seriously and continuously review. They must improve their security protocols to ensure adequate protection against evolving threats.