Medibank Private Limited
FormerlyHealth Insurance Commission
Company typePublicly listed
Founded1975; 49 years ago (1975) (Health Insurance Commission)
Key people
David Koczkar (CEO)
RevenueIncrease A$7.129 billion[1] (2022)
Increase A$584.8 million[1] (2022)
Total assetsIncrease A$4.552 billion[1] (2022)
Total equityIncrease A$1.945 billion[1] (2022)
Number of employees
Decrease 3,768[1] (2022)

Medibank Private Limited, better known as simply Medibank, is one of the largest Australian private health insurance providers, covering over 4 million people in 2024.[2] Medibank initially started as an Australian Government not-for-profit insurer in 1976, before becoming for-profit in 2009 and privatised by the Abbott government in 2014. Medibank now operates as a publicly-listed company on the Australian Securities Exchange.[3]


Medibank began business as an Australian Government-owned private health insurer, established by the Whitlam government in 1975 through the Health Insurance Commission.[4] Medibank was set up to provide competition to private "for-profit" health funds and to put pressure on other health funds to keep premiums at a reasonable level.[5][6]

In 2006, the Howard Coalition government announced that Medibank would be sold in a public float if it won the 2007 election.[7][8][9] However, they were defeated by the Australian Labor Party under Kevin Rudd, which had already pledged that Medibank would remain in government ownership. After 2009, although continuing in government ownership, Medibank operated as a government business enterprise, operating as a fully commercialised business, paying tax and dividends under the same regulatory regime as do other registered private health funds. Before the 2010 election, Liberal leader Tony Abbott made the same pledge to privatise Medibank if it won government, but the party was again defeated by Labor. Again, privatisation was Liberal party policy at the 2013 election, which the Coalition won.[citation needed]

In March 2010, Medibank withdrew benefits for restricted services on its basic First Choice Savers hospital policy. As of June 2010, benefits for procedures such as heart operations and assisted reproductive services will be available only to customers on more comprehensive policies, costing as much as 50% more.[10] Medibank stated that the changes were intended to improve customer understanding of their products. They further stated the impact on customers will be small due to the low rate of use of the restricted services.[11]

In late March 2016, after 14 years as CEO, George Savvides retired earlier than expected.[citation needed] Former NAB chief financial officer Craig Drummond was offered the role and commenced in July 2016. Following Craig Drummond’s retirement, David Koczkar was appointed CEO in May 2021.[citation needed]

"Not for profit" to "for profit" health fund

Medibank was previously run as a not for profit organisation and later operated as a for-profit government business enterprise with dividends paid to the Federal Government.[12] In May 2009, the Rudd government announced that Medibank would become a "for profit" business and would pay tax on its earnings. The process of converting the status of the business was completed on 1 October 2009 following approval from the then regulator, the Private Health Insurance Administration Council (PHIAC),[13][14] an independent statutory authority which regulated the Australian private health insurance industry until 2014. Private health insurance policy is now developed by the Department of Health.

Medibank privatisation

A Medibank office in Westfield Woden during 2022

On 26 March 2014, Abbott government Minister for Finance Mathias Cormann announced that Medibank would be sold through an initial public offering (IPO) in the 2014–2015 financial year.[15]

With the Medibank Private IPO priced at $2.15, the government exceeded the indicative range of $1.55 to $2.00 disclosed in the prospectus. However, it ensured that retail investors only pay $2.00, locking in a minimum 7% gain for them in the short-term.[16] The sale raised $5.7 billion for the government.[17] The sale was completed with 100% of the company sold, listing on the Australian Stock Exchange under the code MPL on 25 November 2014, with 440,000 individual owners with a market capitalisation of A$5.921 billion.[18][19] Medibank held a 29% share of the private health insurance market.[citation needed]

2022 cyberattack

On 12 October 2022, Medibank CEO David Koczkar reported it had detected "unusual activity consistent with the precursors to a ransomware event" in their network but initially provided reassurance that no sensitive customer data has been accessed.[20][21][22] In response to the attack, Medibank took their AHM and international student policy management systems offline and requested a trading halt on the ASX.[21][22] Medibank later announced that a group of alleged hackers have made contact with the company to "negotiate", claiming to have stolen 200 gigabytes of customer data, while providing a sample of 100 customer policies including: "names, addresses, dates of birth, Medicare numbers, phone numbers, and medical claims data including information about diagnosis, procedures and location of medical services". Other information such as credit card security data have also been claimed to have been stolen, yet this remains unverified.[20][23]

On 23 October, Medibank announced that it had received a further 1,000 records from the hacker that contained policy records from the Medibank, ahm and international student databases, with Koczkar stating that they are "operating under the assumption that there is a potential that all customers could be impacted". This widened the previous assumption that only ahm and international student customers were affected, with the potential that all 3.9 million customer records were exposed.[24]

In November 2022, the hacker group, allegedly linked with Russian ransomware group REvil, released Medibank customer data on a dark web blog, after the company reportedly refused to pay the US$9.7m ransom,[25][26][27][28] with reports by 1 December suggesting that the hacker group has released all compromised files remaining in their possession.[29]

Acquisitions and mergers

In January 2009, Medibank acquired the Wollongong-based insurer ahm (Australian Health Management) and merged with the HSA Group in April 2009.[13] Following these transactions, Medibank created the Health Solutions Division, which is focused on delivering occupational health services (such as employment medical examinations and injury treatment) and health coaching programs to help Australians manage health conditions (e.g. diabetes). Services are delivered under the Medibank Health Solutions brands.[30]

In July 2010, Medibank acquired health services provider, McKesson Asia-Pacific, absorbing it into Medibank Health Solutions. The telephone and online health management programs services provided by McKesson Asia-Pacific, including "healthdirect Australia", "Nurse-on-Call", and "Healthline", will be maintained by Medibank.

Industry structure and main competitors

Main article: Healthcare in Australia

Private health insurance in Australia is heavily regulated to protect consumers. Prudential supervision is undertaken by the Australian Prudential Regulation Authority (APRA) to ensure health funds remain solvent.[31] APRA also publishes extensive statistics on the industry and annual financial statement for individual health funds to provide full transparency for stakeholders. The pricing and features of health insurance products is regulated by the Department of Health.[32]

To inform consumers, the Private Health Insurance Ombudsman operates a website to explain private health insurance and provide a standardised basis to compare health fund products.[33]


  1. ^ a b c d e "Annual Report 2022: Doing more for better health" (PDF). Medibank. 2022. Retrieved 12 November 2022.
  2. ^ "Company overview". Medibank. Retrieved 10 May 2021.
  3. ^ "History". Medibank. Retrieved 10 May 2021.
  4. ^ Biggs, Amanda (29 October 2004). "Medicare - Background Brief". Past E-briefs. Australian Parliamentary Library. Retrieved 1 August 2014.
  5. ^ "Opposition plans to sell Medibank Private". ABC News. 21 February 2010. Retrieved 29 June 2013.
  6. ^ Reece, Nicholas (16 February 2013). "Hanging on to Medibank is a national health hazard". Sydney Morning Herald. Retrieved 29 June 2013.
  7. ^ Dept. of Parliamentary Services 2006 research brief into the proposed sale of Medibank Private Archived 28 September 2006 at the Wayback Machine
  8. ^ Medibank Private: Corporate Information
  9. ^ Packham, Ben (13 September 2006). "Election fight over $2b Medibank plan". Herald Sun. News Limited. Retrieved 29 June 2013.
  10. ^ Metherell, Mark (25 March 2010). "Medibank slashes benefits". The Age. Retrieved 30 March 2010.
  11. ^ Medibank Press Release - Medibank simplifying hospital products, 25 March 2010
  12. ^ "Governance framework and principles for operating government owned business enterprises".
  13. ^ a b Lindsay Tanner Press Release Archived 2 October 2009 at the Wayback Machine
  14. ^ "PHIAC Press Release: PHIAC approval for conversion to a 'for profit' insurer". Archived from the original on 30 October 2009. Retrieved 29 March 2010.
  15. ^ "Medibank Private: Government announces sale through IPO, subject to market conditions". ABC News. 26 March 2014. Retrieved 26 March 2014.
  16. ^ Mills, Jonathan (11 November 2014). "Medibank Private IPO: a model for future privatisations". Intelligent Investor (Company). Retrieved 14 March 2015.
  17. ^ "Medibank to raise $5.7 billion". 23 November 2014.
  18. ^ "Media Release 123/14 - Medibank Private Share Offer raises $5.679 billion". Archived from the original on 25 November 2014. Retrieved 1 December 2014.
  19. ^ "Media Release 124/14 - Medibank Private joins the ASX". Archived from the original on 10 March 2015. Retrieved 1 December 2014.
  20. ^ a b Butler, Josh (20 October 2022). "Medibank says sample of stolen customer data includes details of medical procedures". The Guardian. Retrieved 23 October 2022.
  21. ^ a b "Health insurer Medibank Private hit by cyber attack". ABC News. 13 October 2022. Retrieved 23 October 2022.
  22. ^ a b Meacham, Savannah (13 October 2022). "Health insurance provider Medibank hit by 'cyber incident'". 9News. Retrieved 23 October 2022.
  23. ^ Delaney, Ailish; Taylor, Hayley (22 October 2022). "Fears mount as it emerges Medibank hack included personal medical data". 7News. Retrieved 23 October 2022.
  24. ^ Taylor, Josh (25 October 2022). "Medibank reveals hack could affect all of its 3.9 million customers". The Guardian. Retrieved 26 October 2022.
  25. ^ Morris-Grant, Brianna (10 November 2022). "Hackers have released stolen Medibank data on the dark web. What does this mean for customers?". ABC News. Retrieved 27 November 2022.
  26. ^ Taylor, Josh (23 November 2022). "Medibank hacker blog mysteriously disappears but experts warn it may return". Retrieved 27 November 2022.
  27. ^ Taylor, Josh (10 November 2022). "Medibank hacker says ransom demand was US$10m as purported abortion health records posted". Retrieved 27 November 2022.
  28. ^ de Kretser, Ayesha; Davidson, John; Mason, Max; Tillett, Andrew (10 November 2022). "Authorities brace for Medibank data to be trickled out over weeks". Retrieved 27 November 2022.
  29. ^ Janda, Michael; Ziffer, Daniel (1 December 2022). "More Medibank customer data released onto dark web. Has everything now been released?". ABC News. Retrieved 18 December 2022.
  30. ^ "Medibank Health Solutions "about us"".
  31. ^ "PHIAC". Archived from the original on 18 March 2010. Retrieved 29 March 2010.
  32. ^ "Department of Health".
  33. ^ "PHIO".