Medibank breach: Security failures revealed

The 2022 Medibank data breach / extortion attack perpetrated by the REvil ransomware group started by the attackers leveraging login credentials stolen from a private computer of an employee of a Medibank’s IT contractor. According to a statement by the Australian Information Commissioner (AIC) filed with the Federal Court of Australia, the credentials were stolen by way of infostealer malware, after that employee “saved his Medibank username and password for a number of Medibank accounts … More →

The post …

aic attack attackers australia australian breach computer contractor court credentials data data breach don't miss employee extortion failures federal federal court hot stuff information information commissioner login login credentials medibank medibank breach mfa private ransomware ransomware group revil revil ransomware revil ransomware group security statement stolen the australian