MAS cyberattack may have exposed members’ data – report

The cyberattack that hit Medical Assurance Society (MAS), a major insurer of medical professionals in New Zealand, may have exposed the personal data of its members.

The insurer said that its third-party supplier of after-hours call-centre services recently notified it of a breach of their systems through a cyberattack.

“If you have ever used this after-hours service, it is possible they hold some personal data of yours,” MAS chief executive Martin Stokes was quoted as saying by the NZ Herald. “To date, we have no confirmation this data has been compromised, but out of an abundance of caution we have suspended use of this supplier.”

MAS was founded in 1921 by New Zealand doctors and primarily caters to medical professionals. The company said on its website that it insures more than 80% of medical professionals in the country. It also offers insurance for the general public, such as car, home, and life insurance.

Stokes apologised to MAS’s customers and said that the insurer is working with the third-party supplier to “remedy the situation”.

While he assured customers that the insurer’s own systems remain secure, he also advised them to change their passwords in any personal accounts as a precautionary measure.