Medibank

Status Tracked

Health insurer facing an OAIC civil penalty case, filed over its 2022 data breach, that has no outcome we have found; separately brought its own proceedings to restrain the Commissioner from deciding a representative complaint over the same breach.

First tracked: 2026
Last on record: 2026-10-08
Named in: 4 articles
Across: 2 cases

Named in 4 articles across 2 cases 23 connections: companies 10, mechanisms 1, regulators and bodies 5, agencies and departments 4, police 2, people 1

Key figure on file

Three of five, still open

Latitude (about 40 months), Medibank (about 27 months) and Optus (about 13 months) have no published outcome as of 24 September 2026.

Articles naming it

Cases it recurs across

Linked in the graph

Figures on file

Fig. 01 / Where this name appears

The Privacy RortThree of five, still openLatitude (about 40 months), Medibank (about 27 months) and Optus (about 13 months) have no published outcome as of 24 September 2026.3 articles →The Reporting Rort11 article →

Fig. 01Source: article scan · every article naming itAs of 2026‑10‑08Auto-assembled

Fig. 02 / On the record

Three of five, still openLatitude (about 40 months), Medibank (about 27 months) and Optus (about 13 months) have no published outcome as of 24 September 2026.Nearly five years →
$2.22 millionThe maximum civil penalty per contravention that applied to the ACL, Medibank and Optus cases in this article; the Meta case carried a $1.7 million cap. Higher maximums have applied to conduct after 13 December 2022, but none of these cases involve conduct after that date.One penalty →

Fig. 02Source: figures on file for this name, each tied to the article it came fromAs of 2026‑10‑08Auto-assembled

How we know

The sources of the 4 articles that name Medibank, by the tier the desk declared. A source supports its article, not necessarily a claim about Medibank.

Evidence strength · 97 sources across 4 articles

Primary 61
Official 4
Masthead 11
Trade 11
10 not yet graded

Primary: the document itself: legislation, a court record, a filing, a regulator’s own publication
Official: the organisation’s own statement about itself
Masthead: a news organisation with a corrections policy, reporting the primary document
Trade: specialist or trade press

How sources are graded

4 of 4 articles are graded on every headline finding. How findings are graded

Fig. 03 / Named together

The 12 names most often in the same articles as Medibank. A line's weight, and the number by each name, is how many articles name both. Grey chords join the neighbours most often named together themselves (two articles or more). Circles are people and organisations, squares are mechanisms. Named together is all this shows: it is not a finding about what the relationship is.

Fig. 03Source: article scan · articles naming bothAs of 2026‑10‑08Auto-assembled