Australian e-prescription provider MediSecure announces a significant data breach

Australian e-prescription provider MediSecure said it experienced a data security incident that forced it to take its official website offline.

 

In a cyber security incident notice, MediSecure said that it has identified a data security incident that compromised the personal and health information of individuals. The company has launched an investigation to determine the nature and scope of the incident and has initiated efforts to mitigate the impact of the incident.

 

MediSecure said that while the investigation is still in its early stage, the company believes that the cyber security incident originated from one of its third-party service providers.

 

“MediSecure takes its legal and ethical obligations seriously and appreciate this information will be of concern. MediSecure is actively assisting the National Cyber Security Coordinator to manage the impacts of the incident. MediSecure has also notified the Office of the Australian Information Commissioner and other key regulators,” reads the notice.

 

MediSecure’s announcement comes hours after Michelle McGuinness, Australia’s national cyber security coordinator, posted on X that agencies across the Australian Government are responding to a “large-scale ransomware data breach incident” at “a commercial health information organisation.”

 

Cybersecurity Minister Clare O’Neil added that she has been recently notified about the ransomware attack on MediSecure.

 

“I have been briefed on this incident in recent days and the government convened a National Coordination Mechanism regarding this matter today. Updates will be provided in due course. Speculation at this stage risks undermining significant work underway to support the company’s response,” she said.

 

The company said that it is in the process of investigating the cyber security incident and will share more details as and when available. However, considering that the MediSecure was Australia’s sole government-authorized electronic prescription system for healthcare professionals until recently, millions of Australians’ personal and health information could be affected by the incident.

 

As of now, MediSecure’s official website remains offline and phone lines of the company aren’t in use.