{"id":55141,"date":"2024-01-23T03:01:08","date_gmt":"2024-01-23T03:01:08","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/australia-imposes-cyber-sanctions-on-russian-it-says-ransomwared-health-insurer\/"},"modified":"2024-01-23T03:01:08","modified_gmt":"2024-01-23T03:01:08","slug":"australia-imposes-cyber-sanctions-on-russian-it-says-ransomwared-health-insurer","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/australia-imposes-cyber-sanctions-on-russian-it-says-ransomwared-health-insurer\/","title":{"rendered":"Australia imposes cyber sanctions on Russian it says ransomwared health insurer"},"content":{"rendered":"

Australia’s government has used the “significant cyber incidents” sanctions regime it introduced in 2021 for the first time, against a Russian named Aleksandr Gennadievich Ermakov whom authorities have deemed responsible for the 2022 attack on health insurer Medibank Private.<\/p>\n

The 2022 incident saw Medibank attacked by ransomware, and data on around ten million customers leaked<\/a>, some of it to the dark web. Stolen info included details of medical treatments undergone by around half a million Medibank Private customers. The names, dates of birth, addresses, phone numbers and email addresses of 9.7 million customers were also stolen.<\/p>\n

The REvil<\/a> crime gang was named as the likely perpetrator of the attack, and Australian authorities accused<\/a> Russia of harboring the group.<\/p>\n