Medibank has confirmed the personal details of 900 current and former staff members have now been implicated in the insurer’s cyber hack, raising fears of highly targeted scam attacks.

The file, released by Russian-based hackers, includes an excel spreadsheet that contains the names, email addresses, mobile phone numbers and “device information” such as phones of staff.

The insurer said it has received advice from experts that say the risk to the staff is low, but could result in highly targeted spam known as “spear fishing”.

The alleged Medibank hacker released a sample of the user data obtained in the cyber attack on the healthcare giant on Wednesday, November 9, 2022. (Composite)

“The files released by the criminal includes an excel spreadsheet of around 900 current and former employees – including their name, email address, their mobile phone numbers and the device information including the asset number and phone name (serial number and IMEI number),” a Medibank spokesperson said.

“While security experts have told us that the security risk is low, the information could be used for increased spam such as spear fishing.”

As one of Australia's biggest health insurance providers, Medibank holds information that includes intimate medical records
As one of Australia’s biggest health insurance providers, Medibank holds information that includes intimate medical records (Adobe Stock)

Medibank said they are taking a number of steps to protect the affected employees.

“A hacker will not be able to use the information to access people’s phone data or remotely hack into their phone. We’ve also taken steps through our telecommunications provider to block porting of phone numbers for Medibank devices,” the spokesperson said.

“We have offered our employees and former employees the option to change their mobile phone number at no cost to them.

“We also have a dedicated on-call psychologist available.

“For employees who are customers they are able to access the same support as any other Medibank and ahm customer.”

Scam text fools drivers into thinking they have missed paying a toll

In total, around 9.7 million current and former customers and associated representatives have had a raft of their personal details stolen, including names, date of births, addresses, phone numbers and email addresses.

The heath giant is standing firm and refusing to pay the US$9.7 million demanded by the hackers.

A team of 100 officers from the ADF and Federal Police have formed a joint task force to help track down the hackers.

You May Also Like

Thief who killed father walking dog could be free in less than four years

A man who stabbed a Geelong father to death after he was…

Disturbing twist in the death of marketing executive who died from her injuries after allegedly running through a glass door to escape her partner

By ANTOINETTE MILIENOS and CANDACE SUTTON FOR DAILY MAIL AUSTRALIA Published: 21:33…

Clarke Schmidt’s presence more vital to Yankees than ever

It is Game 18. A Wednesday night against the Royals. And not…

Tragic feud overshadowing Tiger Lily’s wedding: Bob Geldof was branded ‘Satanic and cruel’ during bitter custody battle with Michael Hutchence’s family – and the wounds are still raw

Tiger Lily Hutchence’s secret East London wedding to filmmaker Ben Archer this weekend…