I missed this in regard to #medisecure

"The OAIC will not pursue an investigation into the personal information handling practices of MediSecure as the possible remedies that we could obtain for the community will not be proportionate to the resources required for a comprehensive investigation. This should not be of comfort to any organisations that hold personal information and do not have appropriate data security policies and practices in place."

https://www.oaic.gov.au/news/media-centre/statement-on-medisecure-data-breach-september-2024

So the OAIC has done nothing, there have been no changes to the design of electronic prescribing systems to prevent this happening again, and no news that I know of from the AFP on their investigation.

@daedalus

#MediSecure, an electronic medical prescription provider, was hacked earlier this year. The result is 12.9 million profiles of #Australian users currently for sale in the dark web.

As usual, given the anaemic data protection and privacy laws in #Australia, MediSecure has not even bothered so far to notify any of the people affected. They know they will not be held accountable and there will be no consequences to their irresponsibility.

In the ever-evolving landscape of cybersecurity, another chilling chapter has been written. Hidden amidst the #CrowdStrike news cycle, a devastating revelation emerged: #MediSecure has fallen victim to a colossal #ransomware attack, compromising the personal #data of 12.9 million individuals. This #breach exposes our digital infrastructure’s vulnerabilities.

Names, addresses, medical histories, and more—intimate details of millions—now rest in the hands of cybercriminals. The sheer scale of this attack highlights the urgent need for a seismic shift in our approach to cybersecurity.

A critical component is recognizing the importance of machine-to-machine (M2M) identity access management. In our interconnected world, ensuring each machine has a secure identity is paramount. This added security layer can prevent unauthorized access and mitigate breach risks.

Investment in cutting-edge technology and unwavering commitment to security must become our new standard.

On the upside, I'm expecting spam for massively cheaper prescriptions from Russia and/or China now

#MediSecure

As several other fellow tech nerds have commented: given that dataset and the likely database structures, we could figure out who most of the people are, because we have done similar stuff before and it's fiddly but not super hard.

Indeed! Ponder, then, on the purpose of making it seem very difficult and mysterious and why the people doing that might want to give that impression.

#MediSecure