MediSecure cybersecurity incident

​​​​​​​​​​The Australian Government has been informed by MediSecure that the personal and health information of approximately 12.9 million people related to prescriptions, as well as the information of their healthcare providers, may have been exposed in a cybersecurity incident.

MediSecure has published a public notice about the nature and extent of the incident. This can be found at: https://medisecurenotification.wordpress.com

The data affected relates to prescriptions issued through MediSecure’s systems up to November 2023.​

This service enabled prescriptions to be delivered from the prescribing doctor to a pharmacy of the patient’s choice (for paper and electronic prescriptions). By the end of 2023, MediSecure was one of two prescription delivery services operating nationwide.

In May 2023, the Australian Government completed a tender for this service, which was awarded exclusively to another company, eRx Script Exchange (eRx) of the Fred IT Group.

The national prescription delivery service eRx is not affected by this cyber incident. Consumers can continue to access medications securely and healthcare providers can continue to prescribe and dispense medications as usual.

Prescriptions will continue to be issued as normal. People should still be able to access their medicines and fill their prescriptions. This includes prescriptions (paper and electronic) that may have been issued up until November 2023.

​
​