Medibank accepts findings of hack review, refuses to say what those findings are

In a press release on Friday, the medical insurance big stated it had obtained the findings of an investigation by Deloitte into the hack.

“Deloitte has made recommendations to enhance Medibank’s IT processes and systems,” the assertion learn.

“A number of recommendations have already been implemented, and Medibank intends to implement all recommendations not already undertaken, along with other enhancements previously planned by Medibank.

“Medibank will even proceed to evaluate its cyber safety governance preparations, recognising the growing prevalence of cybercrime and the necessity to meet the continuing expectations of our clients.”

However, a spokesperson confirmed to 9news.com.au the company won’t be making the findings of the review, or the review itself, public, sighting security concerns.

“The Deloitte incident evaluate contains confidential and delicate details about the cybersecurity measures that Medibank has in place to guard clients and different knowledge from malicious cyberattacks,” the spokesperson said.

“We do not suppose it is within the pursuits of our clients or the broader Australian group to publicly launch their findings given the safety dangers this might pose, not solely to Medibank however different Australian companies.

“We will continue to share lessons from the cybercrime with other Australian businesses, where we can.”

The cyberattack in October led to the non-public data of as much as 9.7 million of the well being insurer’s present and former clients being dumped on the darkish net.

The data stolen ranged from clients’ names and dates of beginning to medical knowledge.

Deloitte was commissioned by Medibank to conduct its evaluate into the assault in November.

The well being insurer is at present going through two class motion lawsuits over the cyberattack, one introduced on behalf of present and former clients, the opposite from the corporate’s shareholders.

It stated it intends to defend the proceedings in each circumstances.