Data Breach Notification Laws—Momentum Across the Asia-Pacific Region

Excerpt

In late 2022, leading Australian health insurer Medibank Private experienced a catastrophic cyber-attack that saw the data—including highly-sensitive health information—of close to ten million current and former clients stolen. The data were subsequently published on the dark web after Medibank refused to pay a US$10 million ransom. The published records contained identifiable information about people’s HIV status, drug and alcohol treatment and reproductive care. Compared to breaches of purely financial or even identity information, health information hacks like this may cause significant personal distress and stigma that are hard to remedy. The Medibank hack is now subject to several class actions, from both shareholders and affected customers. …