Medibank被黑后，我陆续收到它的通知邮件和来自各地的scam calls，今天我误点了邮件里的链接，邮件说我在它网站上的账号已开通，用户名是我的名字,可以登陆那个网站查询我的订单信息，叫mr4x4.com.au。当时脑子抽抽了，因为之前工作是相关行业，想看看是个什么东西，反应过来不对时已晚了……
几个小时后我给medibank电话撤销了自动扣款，我想申请他们邮件里提供的Free ID protection，她几次让我hold the line她去请示，最后给拒绝了，理由是，我收到的最近的邮件，她让我把邮件内容念给她，她说这封并不是他们通知客人信息被泄漏的邮件，我说我email你那封scam email的截屏，我的信息已经漏了呀，她说她也没用，她重复的要我去idcare 网站Medibank页面去看如何保护自己信息，可信息不是我自己泄漏的，是你被黑了啊。不扯了，所以请问坛子里有没有收到Medibank通知个人信息泄漏的邮件，可否私我参考一下呀？
下面是我收到的她说只是一个general info的邮件
评论
I am writing to provide you with a further update on the cybercrime, which is subject to a criminal investigation by the Australian Federal Police (AFP).
From the very start, we have committed to being transparent about what we know, and how it impacts you.
Unfortunately, it is now clear that the criminal has taken data that belongs to Medibank customers, in addition to that of ahm and international student customers.
This is a distressing development and I unreservedly apologise.
What's happened
We have received a series of additional files from the criminal. We have been able to determine that this includes:
A copy of the file received last week containing 100 ahm policy records – including personal and health claims data
A file of a further 1,000 ahm policy records – including personal and health claims data
Files which contain some Medibank and additional ahm and international student customer data
Given the complexity of what we have received, it is too soon to determine the full extent of the customer data that has been stolen. We will continue to analyse what we have received to understand the total number of customers impacted, and specifically which information has been stolen.
As we continue to investigate the scale of this cybercrime, we expect the number of affected customers to grow as this unfolds.
What we are doing
I know you'll be anxious to hear whether your personal data has been taken as part of this event. While we cannot provide that clarity today, our teams are working around the clock to verify the full extent of the data that has been stolen. If we find your data has been stolen, we will notify you, by email, as soon as we can. Until this verification process is complete, unfortunately our contact centre and retail teams will not have access to further information on whether your data has been stolen.
Customer support
Today we have announced a comprehensive support package for customers who have had their data stolen.
Financial support for customers who are in a uniquely vulnerable position as a result of this crime. They will be supported on an individual basis.
Free identity monitoring services for customers who have had their primary ID compromised
Reimbursement of fees for re-issue of identity documents that have been fully compromised in this crime
All customers have access to:
Specialist identity protection advice and resources from IDCARE
Medibank's mental health and wellbeing support line
You can visit our website for our most recent updates, answers to frequently asked questions, as well as a reminder of the further resources available. Our contact centre team is available on 13 23 31 to answer other questions that you may have.
It’s important for all customers to remain vigilant to suspicious communications received via email, text or phone call, and I encourage you to review the valuable information offered by the Australian Cyber Security Centre, including clear advice on how to further protect yourself.
Deferring our premium change
Given the distress this crime is causing our customers we will also be deferring our premium increases until 16 January 2023.
I want to thank you again for your continued understanding as we work through this event.
Regards,
David Koczkar
Chief Executive Officer, Medibank
评论
这封是最新的
我需要换一个Medicare card 吗
评论
感谢！！！
感谢！！！
评论
咦 这封和我收到的一模一样，
我照片里是这封邮件的后半段，
我给Medibank念了，她说不是！
评论
你的意思是，她说这邮件不是他们公司发的
评论
我老公也收到一封一模一样的
评论
还不清楚要不要换，我自己的话，在optus泄漏时subscribe了equifax的ID和credit protection，一个月$14还是$19块..但我想如果Medibank付费的话我就可以cancel我自费的了，
我Optus没中，或许wws和medibank中了，
评论
我是Medibank 全中，0家是旧客户，半中
评论
不不，她是说，这封邮件并不是Medibank通知客户确信该客户信息被盗的确认信，她说这封信是general information goes to all medibank customer
评论
去搞一个免费的credit savvy shield吧，你想让这些公司吐钱难于上青天，除非搞集体诉讼
评论
好，太感谢了！Equifax用上这头几个月我就换过来，
请问网址是不是creditsavvy.com.au？
评论
她说的应该是对的. General的.
平时千万不要顺便点进链接.有事从自己平时log in的website做入口，或search相关网站.
评论
平时也可以用forward 看看邮件发送地址是不是被伪装的. 一般forward就会显示真实sender.
评论
wow！！从来没这么做过，好的！
我试了一下：
From: Pat Callinan's 4X4 Adventures
[email protected] （怎么撤销这个链接呢，大家别点）
Date: Wed, 26 Oct 2022 at 12:54 pm
Subject: Your Pat Callinan's 4X4 Adventures account has been created!
唉之所以点开是两年以前做相关行业，但我确实不知道这个Pat Callinan…看到链接网址 mr4x4.com.au我想 .com.au可以点吧…结果手比脑快…
我已经把我银行账户saving变成0了
今天给各个公司打电话remove direct debit
我把online transfer也选了not allowed
兜里揣了50和几个钢镚出门了…
最近不方便就不方便点吧…
只是不知道到底我信息泄露了啥..
除了credit和bank acc，买了Equifax的ID和Credit protection 还需不需要换medicare和驾照
大概率换了也白换…还有其他坑吧
评论
update： 我又收到两封其他地方的account register成功的email…这是下一步要干啥
骗子用我的账户和他自己的地址买东西吗
我的gmail邮箱他同步？
评论
Medicare卡可以换新卡(完全不同号码)。你要跟工作人员说明是新卡(transfer from one medicare to another)，不是替换卡replacement
评论
我也收到信了，我想知道，我们应该干点什么？
评论
其实最基本一个就是，正式网站你用邮箱注册的时候，会先发一封邮件来核实邮箱地址，而不是直接告诉你注册成功，突然告诉你成功的，基本上就是钓鱼了，email就是一个收件地址而已，现在就是别人知道了你的邮箱地址，然后发各种邮件来钓鱼，你不随便点击通常没事，就算查看，最好也用iPad iPhone之类，安卓和Windows说实话不那么安全。
评论
疯了阿
各种泄露信息
评论
这个是新常态。
评论
请问换卡号是一定要去服务点办理吗
评论
对
评论
啊 好的！！等我有分分了回来给你补上！
评论
好的！非常感谢！
评论
要不先打客服电话试试，跑一趟怪麻烦的
评论
我就做了这几个…买Equifax的subscription（ID & Credit）、取消direct debit付款方式、把网银上面能转账的全关掉，savings转光光。要不咋办呢？
就把ID都换一遍…这里不漏那里漏的…但是关键ID可能还是换的好…我还没想好换啥…看看骗子下一步动向…叹气
评论
谢谢亲!我咋看不懂呢? 我啥都没做，甚至都没去信用卡查账。要是这么麻烦的话，是不是取消那个卡更好?
评论
um ..申请medibank涉及到的ID是100分的，Medicare卡和驾照，所以我觉得，账户盗刷不是最可恶的，是担心骗子可以用这些100分ID假冒你去做各种事情，所以我觉得，要去查一下自己的信用，并保护一下，银行卡觉得怕被盗刷那就换一个，但还是把付款方式改了吧，因为看起来一个个的，都不靠谱
评论
这个medibank或者旗下的ahm，开通时候，到底提供了哪些个人信息啊？
姓名，生日，地址，电话，email，medicare卡，付款银行卡号
驾照信息我不确定是否提供了
澳洲中文论坛热点
- 新西兰总理：出世在新西兰的新纳粹Thomas Sewell是“挺蹩脚的人”，但那是澳洲的问题
- 新西兰总理拉克森称新纳粹Thomas Sewell是坏人，但是没对要求把他从澳大利亚遣返到诞生国去的呼吁置评。
- 撞穿学校栅栏害死十一岁男孩的司机不必坐牢
- 一位女司机撞穿学校栅栏、害死了11岁男孩，被罚2000元罚金、撤消驾照，不必坐牢。Jack Davey 的父母去了