Discussion – 


Federal Investigation Launched into MediSecure

Federal authorities are investigating a significant ransomware attack targeting Australian healthcare provider MediSecure. The company’s website and phone hotline were offline on Thursday as the Melbourne-based firm, founded in 2009 and known for its electronic prescription services, confirmed it had suffered a cyberattack.

In a statement, MediSecure acknowledged a cybersecurity incident affecting individuals’ personal and health information. Immediate actions have been taken to mitigate any potential impacts on their systems. Preliminary indications suggest the breach may have originated from a third-party vendor.

MediSecure is actively cooperating with the Australian Digital Health Agency and the National Security Coordinator to manage the repercussions of the breach. Regulators, including the Office of the Australian Information Commissioner, have been notified.

“We understand the importance of transparency and will provide further updates as more information becomes available. We appreciate your patience and understanding during this time,” the company stated.

The National Cyber Security Coordinator, Lieutenant General Michelle McGuinness, identified a “commercial health information organisation” as the victim of the breach and highlighted ongoing efforts across various government agencies to coordinate a comprehensive response. The Australian Signals Directorate’s Cyber Security Centre and the Australian Federal Police are also involved in the investigation.

Cybersecurity Minister Clare O’Neil advised against speculation regarding the company’s identity in the breach, emphasising the importance of supporting the ongoing response efforts. She noted that the National Coordination Mechanism was convened to address the incident.

No data has surfaced online, and no ransomware group has claimed responsibility. Sadiq Iqbal, a cybersecurity adviser at Check Point Software Technologies, expressed concern due to MediSecure’s critical role in healthcare but praised the prompt response from the Australian Signals Directorate.

Iqbal also highlighted the vulnerability of the healthcare sector due to outdated systems and limited budgets, suggesting that Australia could benefit from adopting more stringent regulatory compliance measures like those in the United States.

This breach follows several other significant cyberattacks on Australian healthcare providers, including St Vincent’s Health and Medibank, emphasising the industry’s ongoing threat of cybercrime. Despite previous discussions about banning ransomware payments, the Australian government has instead implemented mandatory reporting obligations, recognising the issue’s complexity.

Insight and Recommendations for Businesses

This incident underscores the importance of robust cybersecurity measures, particularly for organisations handling sensitive personal and health information. Oper8 Global recommends the following key strategies, leveraging our advanced products and services:

  1. Enhanced Third-Party Risk Management: Utilise CERT+ to manage and secure digital certificates, ensuring third-party vendors comply with stringent security standards.
  2. Centralised Key Management: Implement CipherTrust Manager to centrally manage encryption keys, control access, and support auditing processes, providing robust protection against data breaches.
  3. Advanced Payment Security: Deploy Payment HSMs to secure retail and internet payment processing, safeguarding sensitive financial transactions from sophisticated cyber threats.
  4. Comprehensive Incident Response Planning: Develop a detailed incident response plan with Oper8 Global’s cybersecurity consulting services, including communication strategies and coordination with regulatory bodies to mitigate the impact of cyberattacks.

Oper8 Global emphasises the necessity of these practices and solutions to safeguard against the increasing threat landscape in the healthcare sector and beyond.

Contact Oper8 Global

You May Also Like