Harry Perkins Institute of Medical Research
Summary
In July 2024, Medusa ransomware attacked Harry Perkins Institute of Medical Research in WA, stealing 4.6 terabytes of data including internal CCTV footage and demanding $500,000. The institute, employing 250+ research staff working on cancer, heart disease, diabetes, and rare genetic diseases, confirmed no patient data, research information, or donor data was compromised—only CCTV recordings. The institute engaged cybersecurity advisers and notified ACSC and law enforcement.
What Happened
Medusa ransomware breached Harry Perkins Institute's internal servers, exfiltrating 4.6TB of CCTV security camera footage and demanding $500,000 ransom.
Impact on Individuals
The breach compromised CCTV footage but no patient, research, or donor data was affected according to the institute.
Organisational Response
Harry Perkins engaged cybersecurity experts, notified ACSC, and worked with law enforcement and privacy regulators.