Your audio article is ready to load.

The health records of millions of Medibank customers were stolen and dumped on the dark web after Medibank refused to pay the demanded extortion.

In October, it was not clear how much data had been compromised or how much money had been extorted. The hackers uploaded a bunch of data despite Medibank not playing ball.

Outside of health information, the data includes personal data such as names, addresses, dates of birth, phone numbers, email addresses, Medicare numbers for ahm customers, and passport numbers for international students.

According to the private healthcare provider, all of its customers' data has been compromised. If former customers are included, that number could be as high as 9 million.

Medibank believes that the hackers will keep posting more stolen data.

Hidden Identity

The hackers have posted naughty and nice lists of the stolen health records. The "naughty" list picks people based on their health histories, so it's even more intrusive.

If they are more than one person, the hackers have refused to identify themselves. According to BleepingComputer, the only clue as to who they are is the fact that the website of REvil is now redirecting to the hacker's website.

The hackers wrote in broken English that they should sell Medibank stocks.

They said they demanded $10 million in exchange for their release.

The Buck Stops

Many have expressed anger at Medibank's handling of the situation. The health insurer's response was slow. Others would say it's a crime.

Medibank may have to pay up to $22 million in damages because it didn't have cyber insurance.

Customers were reassured that no data was compromised. The company's leaders had no idea how wrong they would be.

The Parent-Teacher messaging app was hacked to send mom and dad Horrifying images.