THE RORT · DOSSIER · MEDIBANKSTATUS · TRACKED
Australian Clinical Labs: named together in 4 articlesAustralian Clinical L…The OAIC: named together in 4 articlesThe OAICOptus: named together in 4 articlesOptusThe ACCC: named together in 2 articlesThe ACCCMeta: named together in 2 articlesMetaThe ACMA: named together in 1 articleThe ACMAAmerican Express: named together in 1 articleAmerican ExpressThe ASD: named together in 1 articleThe ASDCyber Security NSW: named together in 1 articleCyber Security NSWDigital ID: named together in 1 articleDigital IDThe eSafety Commissioner: named together in 1 articleThe eSafety Commissio…Google: named together in 1 articleGoogleNPWS: named together in 1 articleNPWSNSW Police: named together in 1 articleOpenAI: named together in 1 articlePM&C: named together in 1 articleQantas: named together in 1 articleServices Australia: named together in 1 articleTelstra: named together in 1 articleVictoria Police: named together in 1 article
DOSSIER / ACTORCOMPANY · HEALTH INSURANCE

Medibank

Status Tracked

Health insurer facing an OAIC civil penalty case, filed over its 2022 data breach, that has no outcome we have found; separately brought its own proceedings to restrain the Commissioner from deciding a representative complaint over the same breach.

First tracked
2026
Last on record
2026-10
Named in
4 articles
Across
2 cases

Named in 4 articles across 2 cases 20 connections: companies 8, mechanisms 1, regulators and bodies 5, agencies and departments 4, police 2

Key figure on file
Three of five, still open
Latitude (about 40 months), Medibank (about 27 months) and Optus (about 13 months) have no published outcome as of 24 September 2026.
4
Articles naming it
2
Cases it recurs across
20
Linked in the graph
2
Figures on file

Fig. 01 / Where this name appears

The Privacy RortThree of five, still openLatitude (about 40 months), Medibank (about 27 months) and Optus (about 13 months) have no published outcome as of 24 September 2026.3 articles →The Reporting Rort11 article →
Fig. 01Source: article scan · every article naming itAs of 2026‑10Auto-assembled

Fig. 02 / On the record

  1. Three of five, still openLatitude (about 40 months), Medibank (about 27 months) and Optus (about 13 months) have no published outcome as of 24 September 2026.Nearly five years →
  2. $2.22 millionThe maximum civil penalty per contravention that applied to the ACL, Medibank and Optus cases in this article; the Meta case carried a $1.7 million cap. Higher maximums have applied to conduct after 13 December 2022, but none of these cases involve conduct after that date.One penalty →
Fig. 02Source: figures on file for this name, each tied to the article it came fromAs of 2026‑10Auto-assembled

Fig. 03 / Named together

MedibankAustralian Clinical Labs: named together in 4 articlesAustralian Clinical Labs4Optus: named together in 4 articlesOptus4The OAIC: named together in 4 articlesThe OAIC4Meta: named together in 2 articlesMeta2The ACCC: named together in 2 articlesThe ACCC2American Express: named together in 1 articleAmerican Express1Cyber Security NSW: named together in 1 articleCyber Security NSW1Digital ID: named together in 1 articleDigital ID1Google: named together in 1 articleGoogle1NPWS: named together in 1 articleNPWS1NSW Police: named together in 1 articleNSW Police1OpenAI: named together in 1 articleOpenAI1
The 12 names most often in the same articles as Medibank. A line's weight, and the number by each name, is how many articles name both. Grey chords join the neighbours most often named together themselves (two articles or more). Circles are people and organisations, squares are mechanisms. Named together is all this shows: it is not a finding about what the relationship is.
Fig. 03Source: article scan · articles naming bothAs of 2026‑10Auto-assembled

How this page is assembled. The name, status and role are the desk's entity record. The article list, case counts, connections and the figures under On the record are read by script from the published articles that name Medibank: the desk's key figures where it declared them, otherwise figures harvested from those articles. A connection is a name that appears in the same articles; it is not a finding about the relationship. The page is rebuilt when an article is published or changed.

← THE DOCKET