Hacker hit won’t stop the attacks

Medibank has thanked the Albanese government for pursuing the Russian hacker behind Australia’s worst cyber attack, although IT security experts warn it is unlikely to deter further data breaches.

The government named Russian man Aleksandr Ermakov as the perpetrator of the October 2022 Medibank data breach, imposing new sanctions on the hacker over the Medibank attack.

The announcement marks the government’s first use of Australia’s autonomous cyber sanctions framework, making it a criminal offence punishable by up to 10 years’ jail to transact with Ermakov, including through cryptocurrency or ransomware payments.

Medibank said cybercrime was a “deliberate and malicious act and every effort should be made to deter criminals for undertaking these crimes”.

The records of 9.7 million Australians were stolen in the Medibank attack, including names, dates of birth, Medicare numbers, and sensitive medical information, with many of the records put on the dark web.

“We appreciate the work of the Australian Federal Police, the Australian Signals Directorate, the Australian Cyber Security Centre, the Department of Home Affairs and the Department of Foreign Affairs and Trade in identifying this individual and the Australian Government for implementing sanctions against them,” the health insurer said.

But Nigel Phair, from Monash University’s department of software systems and cybersecurity, said while the sanctions were a “step in the right direction” they would do little to stop further attacks.

“I congratulate the Australian government for undertaking such a complex investigation,” Professor Phair said.

“This is unlikely to dissuade other internationally based cyber criminals from targeting Australian organisations or individuals, but is a step in the right direction.

“Australian organisations need to continue to protect their information holdings, the systems where these reside and the people who access it.”