Ransomware and Data Breaches Disrupt Healthcare Providers in Australia and Romania

Medibank said attackers accessed personal data belonging to all of its customers and some authorized representatives, affecting about 9.7 million current and former customers. The Australian health insurer said the compromised information included identifying details and health claims data for roughly 480,000 customers, and warned that all accessed data may have been stolen. Medibank later said it would not pay the ransom, citing expert advice that payment would not ensure the return of data or prevent its publication, while Australian officials backed the decision and warned that ransom payments fuel further extortion.

In Romania, hospitals were forced offline after a ransomware attack hit a healthcare IT platform used by multiple medical facilities, disrupting operations across the country. Reporting indicated the crisis was linked to a third-party incident, underscoring how attacks on shared service providers can cascade across healthcare organizations. Together, the incidents highlight how cybercriminals are targeting healthcare entities through both direct intrusions and attacks on critical external platforms, exposing sensitive patient data and interrupting care delivery.