Add Category
Prescription delivery service provider MediSecure, which fell victim to a large-scale cyber breach that compromised the personal health information of thousands of Australians in April, has entered voluntary administration and is expected to face its creditors later this month.
FTI Consulting on Wednesday issued a statement in which it said Vaughn Strawbridge and Paul Harlond were appointed as voluntary administrators of MediSecure on June 3, and liquidators of the company’s subsidiary, Operations MDS, on June 4.
MediSecure has been working with cyber and forensic experts from McGrathNicol Advisory.Credit: Elise Amendola
Until late 2023, the Melbourne-based firm, founded in 2009, was a national prescription delivery service provider serving healthcare providers. The company enabled prescriptions to be delivered from medical professionals to a pharmacy of an individual’s choice.
In May, federal police were investigating the healthcare business, which was targeted in a large-scale ransomware data breach. The same month, a hacker claiming to have Australian patient data from the breach put the information up for sale on a Russian hacking forum for $US50,000 ($75,735). They claimed to be in possession of 6.5 terabytes of data, including insurance numbers, names and addresses of thousands of Australians.
MediSecure has been working with cyber and forensic experts from McGrathNicol Advisory, and FTI Consulting said the company had also been working with the federal government regarding the incident.
Loading
Liquidator Vaughn Strawbridge said Operations MDS had provided the government with detailed information about the breach.
“We recognise the significant concern and the impact of the recent cyber incident,” he said. “Our role as administrators and liquidators includes investigating the affairs of the company to identify reasons for its failure, and to examine options that may be available to recover assets for the benefit of creditors of the companies. We will be speaking to the Australian government about what they need from [Operations MDS] and the next steps in response to the cyber incident.”
The first meeting of MediSecure creditors is scheduled to be held in mid-June.