Australian e-prescription provider MediSecure has reported a data security incident that has compromised personal and health information of numerous individuals, forcing the company to take its official website offline. The breach is believed to have originated from one of MediSecure’s third-party service providers.
In a cyber security notice, MediSecure announced that it has launched an investigation to determine the extent of the breach and has initiated steps to mitigate its impact. The company is working closely with the National Cyber Security Coordinator and has informed the Office of the Australian Information Commissioner and other key regulators about the incident.
MediSecure’s announcement coincided with a statement by Michelle McGuinness, Australia’s national cyber security coordinator, who posted on X that government agencies are responding to a “large-scale ransomware data breach incident” at a commercial health information organization. Cybersecurity Minister Clare O’Neil confirmed the breach, stating that the government has convened a National Coordination Mechanism to address the issue.
O’Neil emphasized the seriousness of the situation and cautioned against speculation, which could hinder efforts to support MediSecure’s response. The company assured that further details would be shared as the investigation progresses.
Given that MediSecure was until recently the sole government-authorized electronic prescription system for healthcare professionals in Australia, the breach could potentially affect millions of Australians. The personal and health information of these individuals might have been exposed.
As of now, MediSecure’s website remains offline, and the company’s phone lines are not operational. The situation underscores the critical need for robust cybersecurity measures in healthcare-related entities, highlighting the widespread impacts that such breaches can have on individuals’ personal and health information.
