MediSecure Details

    Organization Logo

    MediSecure

    Melbourne, Australia • 20 employees • Health Care and Social Assistance

    Industry

    Health Care and Social Assistance

    Security Incidents

    1

    MediSecure is an Australian company that specializes in electronic prescription (ETP) systems for healthcare professionals. Founded in 2008, it provides secure and standards-conformant services that facilitate the electronic transfer of prescriptions between prescribers and dispensers, aiming to improve medication management, clinical integrity, and reduce prescribing errors. MediSecure is dedicated to driving innovation in digital health, ensuring that electronic prescriptions are sent safely and efficiently to enhance patient outcomes

    Security Incidents

    MediSecure Breach of May 2024
    Severity Score
    High

    Type

    Unknown

    Summary

    MediSecure, an Australian e-prescription delivery service, disclosed a major data breach, impacting nearly 13 million individuals. The breach, identified through collaboration with McGrathNicol Advisory and the National Cyber Security Coordinator, involved the exfiltration of 6.5 terabytes of sensitive personal and health data. This data includes full names, birth dates, contact information, healthcare identifiers, Medicare and other government-issued card numbers, prescription details, and more.

    The sheer volume and complexity of the leaked data have made it difficult for MediSecure to preci...
    Show more

    Severity

    The cyberattack on MediSecure resulted in a highly significant data breach, compromising sensitive personal and health information of nearly 13 million Australians. Attackers exfiltrated 6.5 terabytes of data, which included highly sensitive details like full names, birthdates, healthcare identifiers, and prescription medication information. MediSecure's inability to financially or logistically pinpoint every impacted individual further exacerbates the situation, leaving those affected vulnerable to phishing attempts, identity theft, and other online scams. With the potential for substantial m...
    Show more

    Impact

    The cyberattack on MediSecure was a substantial data breach impacting nearly 13 million individuals, marking one of the largest healthcare data breaches in Australian history. Approximately 6.5 terabytes of highly sensitive personal and health information were exfiltrated. The compromised data included full names, titles, dates of birth, genders, email addresses, phone numbers, various health card numbers, and detailed prescription information.

    Internal company records were also exposed, although no systems or services were taken offline due to the incident. Despite a successful full server b...
    Show more

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos