Skip to content
Medibank Faces Class Action Over 2022 Data Breach

Medibank Faces Class Action Over 2022 Data Breach

First seen 4 Oct 2026, 04:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 4, 2026 at 08:03 UTC
  • •Medibank is facing a class action lawsuit and civil penalties over a 2022 data breach.
  • •The breach involved a hacker moving undetected for weeks, leading to the leak of 529 GB of data.
  • •Key security failures cited include the lack of multi-factor authentication and inadequate monitoring.

Medibank is currently facing a class action lawsuit and civil penalties from the privacy watchdog following a significant data breach in 2022. A hacker reportedly moved undetected through Medibank's network for weeks, exploiting multiple security deficiencies and ignoring alerts raised by the system. The breach resulted in the leak of 529 gigabytes of sensitive customer data, which was published on the dark web under various provocative file names. The class action alleges that Medibank failed to implement security measures, including multi-factor authentication and proper monitoring of IT changes. The Federal Court is deliberating whether to consolidate the class action and the privacy watchdog's case. Medibank's legal representation has criticized the class action as disorganized and evolving rapidly in its claims.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2022-08-01
Initial network access gained
The hacker gained access to Medibank's network through a third-party contractor's personal computer.
Indailysa.Au
2022-10-13
Data leaked on dark web
Personal data was leaked under malicious file names, including 'boozy' and 'HIV'.
Indailysa.Au
2026-10-02
Court hearing on class action
Federal Court Justice Jonathan Beach heard arguments on whether to consolidate the class action and privacy case.
Indailysa.Au

More articles in this cluster (3)

Following this threat?

Track Medibank in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

What data was leaked?
The breach resulted in the leak of 529 gigabytes of customer data, including sensitive personal information.
What security measures were lacking?
Medibank allegedly failed to implement multi-factor authentication and proper monitoring of IT changes.
What is the current status of the lawsuit?
The Federal Court is currently deciding whether to consolidate the class action and the privacy watchdog's case.