Medibank hack: Russian sanctioned over Australia’s worst data breach

They first released a set of files named “good-list” and “naughty-list” which contained, among other things, people’s health claims data – including records of treatment for mental health or addiction – as well as names, addresses, birthdates, and government ID numbers. Soon after they posted: “added one more file abortions.csv…”, about some customer’s end of pregnancy procedures.