By Renju Jose
SYDNEY (Reuters) -Medibank&nbsp;Private Ltd, Australia's biggest health&nbsp;insurer, said on Thursday&nbsp;hackers&nbsp;had released&nbsp;more&nbsp;of its stolen medical records, as the media reported that the complete set of&nbsp;data&nbsp;on millions of&nbsp;customers was now public.
The Office of the&nbsp;Australian&nbsp;Information Commission (OAIC), the country's privacy regulator, has also begun investigating how the company handles personal information,&nbsp;Medibank&nbsp;said in a statement.
The latest release on the dark web follows progressive uploads, including records of&nbsp;customers' mental health and alcohol use, that began after&nbsp;Medibank&nbsp;said on Nov. 7 it would not pay a ransom.
"The raw&nbsp;data&nbsp;we have analysed today so far is incomplete and hard to understand," chief executive David Koczkar said. "While there are media reports of this being a signal of 'case closed', our work is not over."
On Thursday, the media reported that a blog, believed by cyber experts to be used by the&nbsp;hackers, carried a new post: "Happy Cyber Security Day!!! Added folder full. Case closed." It also included a file that had several compressed files amounting to&nbsp;more&nbsp;than 5 gigabytes.
Reuters has not verified the contents of the latest files uploaded on the dark web, part of the World Wide Web that is accessible only with a special software.
Medibank&nbsp;did not immediately respond to a Reuters question whether it believed all stolen&nbsp;data&nbsp;had now been released.
Australian&nbsp;Federal Police last month said Russia-based&nbsp;hackers&nbsp;were behind the&nbsp;Medibank&nbsp;cyberattack, which compromised the details of almost 10 million current and former&nbsp;customers. Medicare revealed the breach on Oct. 13.
In an update on Thursday morning,&nbsp;Medibank&nbsp;said there were currently no signs that banking&nbsp;data&nbsp;had been stolen. Personal details accessed by&nbsp;hackers&nbsp;were not enough to enable financial fraud, it added.
Six zipped files placed in a folder called "full" and containing raw&nbsp;data&nbsp;believed to have been stolen had been uploaded,&nbsp;Medibank&nbsp;said in a statement.
Australia has been grappling with a recent rise in cyber attacks. At least eight companies, including telecoms company Optus, owned by Singapore Telecommunications, have reported breaches since September.
The OAIC, which is also investigating Optus over the breach, did not immedietely respond to a Reuters request for comment on the&nbsp;Medibank&nbsp;investigation.
Technology experts have said Australia has become a target for&nbsp;hackers&nbsp;just as a skills shortage leaves an understaffed, overworked cybersecurity workforce ill-equipped to stop attacks.
(Reporting by Renju Jose in Sydney, Himanshi Akhand and Harshita Swaminathan in Bengaluru; Editing by Shailesh Kuber, Bradley Perrett and Sherry Jacob-Phillips)

you might like

Hackers dump more customer data from Australian insurer Medibank