Medibank Private Ltd

Medibank's 2022 cyberattack was not a one-day privacy event. It became a continuing record of who controlled remote access, sensitive data retention, customer notification, ransom refusal, identity support, regulator evidence, sanctions attribution and litigation risk after health insurance information was stolen and later published. The event shows why health data accountability does not end when systems are contained: the records remain personal, searchable, copied and legally active long after the first incident notice.