MediSecure ransomware attack hits Australian e-prescription provider

MediSecure, a former electronic prescription provider that was one of two approved in Australia until 15 November 2023, when eRx became the sole national provider, confirmed on 16 May 2024 that it had been hit by a ransomware attack affecting the personal and health information of individuals in its systems. MediSecure said that at the time of the incident it had no connections to the prescribing and dispensing of medications. The company said early indicators pointed to a compromise at one of its third-party vendors, and it did not name the vendor or the attackers.

The company took its website and telephone lines offline as a containment step, leaving only a short advisory page reachable. Lieutenant General Michelle McGuinness, Australia's National Cyber Security Coordinator, described the event as a large-scale ransomware data breach incident and said she was working with agencies across the Australian government, states and territories to coordinate a whole-of-government response. The Australian Signals Directorate's Australian Cyber Security Centre and the Australian Federal Police opened investigations.

Officials moved to limit disruption to patients. The New South Wales government advised that current electronic prescription services, including eRx and the National Prescription Delivery Service, were unaffected, and that people did not need to replace their Medicare or concession cards.

The full scale emerged after the reporting date. MediSecure later said roughly 6.5 terabytes of data relating to prescriptions dispensed between March 2019 and November 2023 had been taken, and that up to 12.9 million Australians may have been affected. The company entered voluntary administration in June 2024 after losing its main government contract.