All Breaches
Medibank Data Breach
In October 2022, Australia's largest private health insurer Medibank suffered a catastrophic cyberattack after high-privilege credentials belonging to a third-party IT contractor were compromised.
9.7 Million
Reported Records
8
Data Types
Critical
Severity
Oct 20, 2026
Last updated
Exposed Data Types
3 sensitive8- Medicare card numbers
- Medical procedure codes
- Health claims records
- Customer names
- Dates of birth
- Physical addresses
- Phone numbers
- Email addresses
About This Breach
Following Medibank's refusal to pay a ransom, Russian-linked extortionists published sensitive medical diagnoses, treatment codes, Medicare details, and health claims records for approximately 9.7 million customers on the dark web.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
