TL;DR: The MediSecure breach (disclosed May 2024) affected about 12.9 million people. Exposed: personal and health information relating to prescriptions distributed through MediSecure’s systems up to November 2023, plus Medicare card details (numbers, individual identifiers, expiry dates). MediSecure later went into administration. Your Medicare account can’t be accessed with card details alone, and you don’t need to act on concession cards. Your biggest risk is health-themed scam calls.
What happened
MediSecure, an electronic prescription delivery service, told the government about 12.9 million people may be affected. It’s one of the largest breaches in Australian history (Reuters factbox), and the company later went into administration.
What was exposed
According to ID Support NSW:
- Personal and health information relating to prescriptions distributed by MediSecure up to November 2023;
- Medicare card details: numbers, individual identifiers and expiry dates;
- healthcare provider information.
The current national prescription delivery service wasn’t affected. Paper and e-scripts work as normal.
What you don’t need to worry about
- Services Australia says you don’t need to act on Pensioner Concession, Health Care or Commonwealth Seniors Health cards.
- Your Medicare online account can’t be accessed with card details alone.
What you should watch for
Scammers love health data because it sounds personal. Expect:
- calls "from your pharmacy" or "from Medicare" mentioning a medication;
- "compensation for the MediSecure breach" offers;
- fake insurer calls about a claim.
Hang up and call back on a number you find yourself.
What to do
- Report misuse to ReportCyber at cyber.gov.au.
- Turn on multi-factor authentication for myGov and email.
- Use strong, unique passphrases.
- NSW residents: ID Support NSW offers free help on 1800 001 040.
- Elsewhere: IDCARE on 1800 595 160.
Health data stays sensitive for life, so this is one to remember. See also Medibank and Genea. A free exposure check shows the breaches tied to your email.
Frequently Asked Questions
How many people were affected by the MediSecure breach?
About 12.9 million people, according to MediSecure.
Was my Medicare card number exposed?
Medicare card details, including numbers, individual identifiers and expiry dates, were exposed for affected people.
Can someone access my Medicare account with my card number?
No. Services Australia says the Medicare account can’t be accessed with card details alone.
Do I need to replace my concession card?
No. Services Australia says no action is needed on concession or Commonwealth Seniors cards.