You have1 free article left this month.
Register for a free account to access unlimited free content.
You have 1 free article left this month.
Register for a free account to access unlimited free content.

Lawyers Weekly - legal news for Australian lawyers

Powered by MOMENTUM MEDIA
lawyers weekly logo

Powered by MOMENTUM MEDIA

Goodbye job applications, hello dream career
Seize control of your career and design the future you deserve with LW career

Medibank dragging feet on documents relating to data hack

A Federal Court judge questioned why it has taken Medibank so long to disclose documents to applicants who alleged the insurance giant failed to take proper precautions to prevent a major data hack.

user iconNaomi Neilson 01 September 2023 Big Law
expand image

Counsel for the applicant, led by Baker McKenzie, said Medibank has not yet disclosed documents relating to the data breach since they were given the request in mid-February, the Federal Court heard during Thursday’s (31 August) case management hearing.

From the bench, Medibank’s counsel submitted it was not a “small set of documents” the applicants were seeking, which includes audit reports over a five-year period and data from the incident register.

He added that some parts of the requested material “will be a large volume of irrelevant and privileged material”.

The counsel said he was prepared to write to the applicants with a list of what Medibank determined are the “core documents”.

However, counsel for the applicants, Wendy Harris, said since the request has been with Medibank, “we have not been blessed with a letter, let alone an affidavit” explaining the documents.

“It’s unsatisfactory in the extreme for Your Honour to be acting from evidence from the bar table about what is and isn’t possible,” she said.

Justice Jonathan Beach told Medibank he would have “assumed you would have already fathered this material at least six months ago”, and questioned why the financial institution had not at least sent the documents on for the applicants to determine what was appropriate.

“You have had done that a long time ago,” Justice Beach said.

“You have been put on notice for a while.”

Referring to the counsel’s submissions that it would be impossible for Medibank to snapshot specific dates in its incident register, Justice Beach requested they submit an affidavit with proof of this.

During the same case management hearing, counsel on behalf of the Office of the Australian Information Commissioner (OAIC) – which has its own investigation into Medibank – has hit back at the attempt to have them join the proceedings, explaining the commissioner “is not a protagonist in this proceeding and ought not be there”.

It was determined proceedings relating to the OAIC should run separately from the class action proceedings.

“It does seem to be that there should be a separate proceeding,” Justice Beach agreed on Thursday.

Naomi Neilson

Naomi Neilson

Naomi Neilson is a senior journalist with a focus on court reporting for Lawyers Weekly. 

You can email Naomi at: naomi.neilson@momentummedia.com.au

Comments (0)
    Avatar
    Attach images by dragging & dropping or by selecting them.
    The maximum file size for uploads is MB. Only files are allowed.
     
    The maximum number of 3 allowed files to upload has been reached. If you want to upload more files you have to delete one of the existing uploaded files first.
    The maximum number of 3 allowed files to upload has been reached. If you want to upload more files you have to delete one of the existing uploaded files first.
    Posting as
    You need to be a member to post comments. Become a member for free today!