Following the data breach reported on 26th October, details of Australians’ medical histories have been leaked online after the private health insurer refused to pay a ransom for the records of almost 10 million customers.

Medibank said that it consulted with cybercrime experts before determining that paying the ransom would not ensure the return of customers’ data and that it now expected more customer data to be released after the extortionist posted personal information, including names, addresses, and details of medical procedures, on a dark-web forum.

Australia’s Cybersecurity Minister Clare O’Neil said Medibank’s decision not to pay was consistent with government advice and urged social media platforms and media organisations not to facilitate the sharing of stolen medical histories.