When the Australian health insurer Medibank Private Ltd was hit with a ransomware attack last month, it provided regular updates to its customers, including the revelation that personal information from nearly 10 million of them was exposed. It also followed the government’s guidance on how to respond to the extortion demand.
Medibank didn’t pay the ransom. But that plan hasn’t worked out so well.
