The Australian Federal Police is investigating reports Australians' personal Medicare details are being accessed and sold on the dark web, an apparent breach that has been labelled an "internet catastrophe".
According to a Guardian Australia report, an online vendor can pull up the full Medicare card details of any Australian on request — and is selling them for around $30 each — indicating a security hole somewhere in the health system.
More National News Videos
- Video duration
- 00:33
Medicare details sold on dark web
Medicare details sold on dark web
A report shows that the full Medicare card details of any Australian are being sold on the dark web for around $30 each.
Up Next
British tourist found 'safe and well'
- Video duration
- 00:26
- Video duration
- 00:26
British tourist found 'safe and well'
British tourist found 'safe and well'
An tourist with autism who went missing from a Melbourne beach has returned to the place he was staying with his family. Vision courtesy Seven News, Melbourne.
Up Next
Missile launch: World leaders react
- Video duration
- 01:51
- Video duration
- 01:51
Missile launch: World leaders react
Missile launch: World leaders react
North Korea's decision to test an intercontinental ballistic missile has provoked anger and stern words from world leaders.
Up Next
What Abbott could learn from Gillard
- Video duration
- 01:49
- Video duration
- 01:49
What Abbott could learn from Gillard
What Abbott could learn from Gillard
As former PM Tony Abbott continues to criticise his party, more are heaping criticism on him. Perhaps he should take some advice from fellow former PM Julia Gillard.
Up Next
Coca-Cola earnings report
- Video duration
- 00:34
- Video duration
- 00:34
Coca-Cola earnings report
Coca-Cola earnings report
Coca-Cola Amatil has announced it will close its South Australia manufacturing plant after posting a drop in annual profit.
Up Next
Video of bus surfing teens emerges
- Video duration
- 00:24
- Video duration
- 00:24
Video of bus surfing teens emerges
Video of bus surfing teens emerges
Authorities are cracking down on teens bus surfing in Brisbane. Vision courtesy: Seven News.
Up Next
Ali Fahour handed lifetime ban
- Video duration
- 00:57
- Video duration
- 00:57
Ali Fahour handed lifetime ban
Ali Fahour handed lifetime ban
The Northern Football League has ended the playing career of AFL diversity manager Ali Fahour, handing him a lifetime ban effective immediately.
Up Next
Map shows Aboriginal massacre sites
- Video duration
- 01:04
- Video duration
- 01:04
Map shows Aboriginal massacre sites
Map shows Aboriginal massacre sites
Australia's dark history of mass killings has been catalogued by the University of Newcastle, showing the prevalence of massacres in our own backyard
Medicare details sold on dark web
A report shows that the full Medicare card details of any Australian are being sold on the dark web for around $30 each.
Human Services Minister Alan Tudge said the government was taking the matter seriously.
The sales are reportedly listed on an undisclosed dark web marketplace, in which the vendor claims to be "exploiting a vulnerability" in order to run software that pulls the data. The vendor calls it "the Medicare Machine".
"Leave the first and last name, and DOB of any Australian citizen, and you will receive their Medicare patient details in full", the listing says, adding that the nature of the security hole being utilised means the vendor will be "here to stay".
In a statement, Mr Tudge said any authorised access to Medicare card numbers was "of great concern" and his department was also conducting its own investigation.
"The security of personal data is an extremely serious matter. Thorough investigations are conducted whenever claims such as this are made", he said.
"The government has an ongoing commitment to prioritise cyber security and is constantly working to further improve our capability".
Acting Opposition Leader Tanya Plibersek said the government has serious and urgent questions to answer on the "internet catastrophe".
"It is absolutely critical that the government explain today, immediately, how many records have been breached," she said.
"When did the government find out that this security risk was occurring? What have they done to notify people whose records might have been sold?"
Ms Plibersek accused the government of presiding over a "repeat nightmare", pointing to the Census debacle, glitches with the online NAPLAN testing system, and the "second-rate" NBN.
In order to test the veracity of the claims, Guardian Australia requested the Medicare details of a member of its staff, and confirmed the received details – including the Medicare card number and and personal IRN – were accurate.
Legitimate Medicare card details could be used to create fake cards, which would be handy for criminals in identity theft. The cards could be used in part, for example, to open bank accounts, apply for a passport, get a credit card or start an illegal business.
The information would not be enough, however, to access personal health record information.
The vendor appears to have made at least 75 sales, each one netting him 0.0089 bitcoin, or $29.75 by the current exchange rate.