MediSecure posted a statement on its website blaming the issue on one of its third party providers. They have taken immediate steps to protect their systems and the first signs are that breaches have begun at one of their vendors.
MediSecure, which helps safely move prescriptions for doctors and pharmacies, stressed the importance of being open about what’s going on. They promised to update everyone on their site as they learn more and thanked everyone for their patience and understanding.
They are working closely with the Australian Digital Health Agency and the National Cyber Security Coordinator, and have informed the Office of the Australian Information Commissioner and other key regulators.
Earlier today, National Cybersecurity Coordinator Lt. Gen. Michelle McGuinness revealed that a health news organization suffered a major ransomware attack on May 15. She noted that she is planning for all governments to respond. The Australian Cyber Security Agency is aware of it, and the Australian Federal Police is investigating.
McGuinness said an initial response is underway and they don’t have much information yet. He promised to keep everyone updated and is working closely with the affected organization to deal with the consequences of the breach.
Meanwhile, the federal Department of Health and Aging Services established a national prescription drug delivery system last year, run by another PES company, eRx. Pharmacies and pharmacies now use eRx for e-scripts.This change means that general practices can’t create, cancel, or delete new eScripts on MediSecure, but they can still access older scripts stored on MediSecure’s servers.
