Medibank
Data Breach
www.medibank.com.au3,565,480
Records Exposed
Oct 2022
Date of Breach
Database
Breach Type
Oct 2026
Added to Database
About This Breach
In October 2022, Medibank, Australia's largest private health insurer, suffered a major data breach after a threat actor gained access to its network using stolen credentials and exfiltrated the personal and health-claim data of approximately 9.7 million current and former Medibank, ahm and international-student customers. After Medibank refused to pay the ransom, the attackers (linked to a REvil successor group) progressively published the stolen data on a dark-web blog in November 2022, including curated 'naughty' and 'good' lists of customers tied to sensitive medical procedures. This partial dump distributed via Telegram contains structured customer identity records exposing full names, email addresses, phone numbers, residential addresses, dates of birth, gender, passport numbers (international students) and health-claim data. The records were distributed via a Telegram breach channel.
Compromised Data Types
Country
Australia
Language
English
Category
Health
Indexed On
Oct 13, 2026
Breach Type
Database
What Should You Do?
Get Full Breach Details with LeakedSource Pro
Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.
Sign Up for Pro- Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
- Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
- Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
- Use a password manager to generate and store unique, strong passwords for every account.
Were You Affected by This Breach?
Enter your email below to instantly check if your data was compromised in the Medibank breach and 12,000+ other known breaches.
