In a joint statement, the European Union and its Member States expressed solidarity with Australia in the face of a malicious cyber attack on its healthcare sector, specifically targeting major health service provider, Medibank. The statement highlights the theft of millions of records, including personal information such as names, dates of birth, social security numbers, and sensitive medical data. Some of this stolen information has reportedly surfaced on the dark web.
Australia attributes the 2022 network compromise to a Russian cybercriminal, marking the first time the country has utilized its autonomous cyber sanctions framework to respond to such a significant incident. The European Union and its Member States stand in support of Australia and condemn ongoing malicious cyber activities, particularly those impacting essential operators within the European Union, often through ransomware attacks.
The healthcare sector, already grappling with challenges from the COVID-19 pandemic, has become a prime target for malicious cyber activities. The consequences include the theft and dissemination of personal and sensitive data, as well as disruptions to critical healthcare services. The joint statement emphasizes the collective commitment to monitoring the evolving threat landscape and strengthening cross-border law enforcement cooperation to combat ransomware.
To address these challenges, the European Union and its Member States pledge ongoing support for essential service operators, working to enhance resilience and bolster efforts to deter and respond to malicious cyber activities through joint diplomatic action. The statement recalls the importance of adhering to UN norms of responsible State behavior in cyberspace, which include refraining from damaging or impairing critical infrastructure serving the public.
Furthermore, the European Union and its Member States call upon all nations to prevent their territories from being used for malicious cyber activities and to take appropriate actions against entities conducting such operations. The commitment extends to the promotion of a global, free, open, secure, and stable cyberspace, emphasizing ongoing efforts, notably the establishment of the UN Programme of Action to achieve these goals.