--- title: Medibank – It just kept getting worse description: Data is held in many applications, even when SAP is the primary ERP system. It begs the question, where is your data and how can it be protected? image: https://www.legupsoftware.com/hubfs/The%20Medibank%20data%20breach%20%E2%80%93%20It%20just%20keeps%20getting%20worse..jpg --- [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) - [Home](https://www.legupsoftware.com) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Adminstrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [SAP Incident Ticketing](https://www.legupsoftware.com/product-itsm-connector) - [SAP System Copy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Data Anonymisation](https://www.legupsoftware.com/product-libelle-datamasking) - [iDoc Management and Monitoring](https://www.legupsoftware.com/product-libelle-edimon) - [SAP Security Vulnerability Analysis and Monitoring](https://www.legupsoftware.com/product-smartersec) - [SAP License Management and Optimisation](https://www.legupsoftware.com/product-samq) - [SAP User Role and Authorisation Management](https://www.legupsoftware.com/product-soterion) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) [Get in touch](https://www.legupsoftware.com/contact) [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) [Get in touch](https://www.legupsoftware.com/contact) [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) - [Home](https://www.legupsoftware.com) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Adminstrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [SAP Incident Ticketing](https://www.legupsoftware.com/product-itsm-connector) - [SAP System Copy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Data Anonymisation](https://www.legupsoftware.com/product-libelle-datamasking) - [iDoc Management and Monitoring](https://www.legupsoftware.com/product-libelle-edimon) - [SAP Security Vulnerability Analysis and Monitoring](https://www.legupsoftware.com/product-smartersec) - [SAP License Management and Optimisation](https://www.legupsoftware.com/product-samq) - [SAP User Role and Authorisation Management](https://www.legupsoftware.com/product-soterion) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) [Get in touch](https://www.legupsoftware.com/contact) [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) [Get in touch](https://www.legupsoftware.com/contact) - [Home](https://www.legupsoftware.com) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Adminstrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [SAP Incident Ticketing](https://www.legupsoftware.com/product-itsm-connector) - [SAP System Copy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Data Anonymisation](https://www.legupsoftware.com/product-libelle-datamasking) - [iDoc Management and Monitoring](https://www.legupsoftware.com/product-libelle-edimon) - [SAP Security Vulnerability Analysis and Monitoring](https://www.legupsoftware.com/product-smartersec) - [SAP License Management and Optimisation](https://www.legupsoftware.com/product-samq) - [SAP User Role and Authorisation Management](https://www.legupsoftware.com/product-soterion) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) [Get in touch](https://www.legupsoftware.com/contact) [Security](https://www.legupsoftware.com/expert_insights/tag/security) [Data Masking](https://www.legupsoftware.com/expert_insights/tag/data-masking) # Medibank – It just kept getting worse By [Rick Porter](https://www.legupsoftware.com/expert_insights/author/rick-porter) November 16, 2022 1 Minute Read Medibank is in all sorts of trouble. Every week there are new revelations about the data stolen from their systems. Recent revelations showed that data stolen now includes detailed and sensitive personal medical information. It's a difficult time for those running Medibank IT. Medibank is a significant user of SAP ERP, which got me wondering how SAP systems and data can be protected from similar data breaches. Data is held in many places and in many applications, even when SAP is the primary ERP system. So, to be clear, the Medibank issue might not have anything to do with SAP, but it does beg the question.  Where is sensitive data held within SAP systems, and how can it be protected? # Security management Sensitive data is held in all kinds of places. E.g., DEV systems, QA systems, Pre-PRD systems, Disaster and Recovery backup systems, project systems, data warehouse systems, and reporting systems. Several elements must be in place if we consider the security of data held within SAP systems. These include protecting data where possible, closing potential entry points, and ensuring entry can be detected and closed off quickly. ### Data protection Where it's possible, e.g., in non-productive systems, data masking is an excellent option. The data is only in these systems to enable accurate testing and development. Masking the data ensures it's helpful in testing and development teams but useless for anything – or anyone - else. ### Entry point protection Entry point protection includes managing SAP security updates, user authorisations, and code vulnerabilities. Keeping up to date with security patches, ensuring user access to system areas is limited to their roles, and closing off ABAP code vulnerabilities can all help. ### Threat detection A tremendous amount of monitoring noise is often associated with endless penetration attempts. Monitoring systems with sophisticated filters and alerting are required to ensure focus is applied to the most critical threats and attacks. ## Solutions Unfortunately, there is no one silver bullet software to managing these in an all-in-one solution; a combination of solutions is required. Here are several SAP-specific solutions for consideration. ### Libelle DataMasking For non-PRD data protection, and there are many areas where this protection is needed, we recommend Libelle DataMasking. ### Onapsis For code vulnerability management, you could look at vendors like Onapsis.  ### setQ For user authorisation management, we recommend setQ from VOQUZ Labs ### SecurityBridge For threat and attack detection we suggest you look at SecurityBridge. ## Want to learn more? To learn more about any of the solutions mentioned, contact us and we will get right back to you. [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg)](https://www.legupsoftware.com/expert_insights/author/rick-porter) #### Rick Porter With over two decades of working within the SAP ecosystem, Rick has met and worked with SAP IT professionals from broad backgrounds and experiences. Rick knows the stresses and strains experienced by those managing SAP systems and enjoys bringing these insights and reflections into conversations. Author ## Recommended For You [![](https://www.legupsoftware.com/hubfs/image%20(6).jpg)](https://www.legupsoftware.com/expert_insights/data-security-and-s/4hana-migrations-putting-clients-at-ease-a-guide-for-system-integrators) [SAP](https://www.legupsoftware.com/expert_insights/tag/sap) [Automation](https://www.legupsoftware.com/expert_insights/tag/automation) 3 Min Read ### [Data Security and S/4HANA Migrations: Putting Clients at Ease - A Guide for System Integrators](https://www.legupsoftware.com/expert_insights/data-security-and-s/4hana-migrations-putting-clients-at-ease-a-guide-for-system-integrators) [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg) Rick Porter March 7, 2025](https://www.legupsoftware.com/expert_insights/author/rick-porter) [![](https://www.legupsoftware.com/hubfs/image%20(13).jpg)](https://www.legupsoftware.com/expert_insights/rubbish-in-rubbish-out-what-does-your-ecc-data-look-like) [SAP](https://www.legupsoftware.com/expert_insights/tag/sap) [Automation](https://www.legupsoftware.com/expert_insights/tag/automation) 2 Min Read ### [Rubbish in, Rubbish out: What Does Your ECC Data Look Like?](https://www.legupsoftware.com/expert_insights/rubbish-in-rubbish-out-what-does-your-ecc-data-look-like) Last week, I was invited to an in-person meeting with the Precisely team to learn about their SAP master data ... [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg) Rick Porter July 28, 2025](https://www.legupsoftware.com/expert_insights/author/rick-porter) [![SAP user management](https://www.legupsoftware.com/hubfs/dreamstime_l_244229849_2-1.jpg)](https://www.legupsoftware.com/expert_insights/how-many-users-have-access-to-sensitive-data-within-your-sap-systems) [SAP](https://www.legupsoftware.com/expert_insights/tag/sap) [Third-party software](https://www.legupsoftware.com/expert_insights/tag/third-party-software) [Managing SAP Systems](https://www.legupsoftware.com/expert_insights/tag/managing-sap-systems) [Security](https://www.legupsoftware.com/expert_insights/tag/security) 2 Min Read ### [How many users have access to sensitive data within your SAP systems?](https://www.legupsoftware.com/expert_insights/how-many-users-have-access-to-sensitive-data-within-your-sap-systems) As expected, the Latitude Finance announcement of the theft of 255,000 customer records was just the ... [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg) Rick Porter April 4, 2023](https://www.legupsoftware.com/expert_insights/author/rick-porter) ![logo-footer](https://www.legupsoftware.com/hubfs/Website,%20Dec%202022/Assets/logo-footer.png) Melbourne VIC 3001 AUSTRALIA Phone: +61 3 9000 0958 Email: [info@legupsoftware.com](mailto:info@legupsoftware.com)   [John 3:16](https://www.kingjamesbibleonline.org/John-3-16/) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Administrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [Libelle SystemCopy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Libelle DataMasking](https://www.legupsoftware.com/product-libelle-datamasking) - [Libelle EDIMON](https://www.legupsoftware.com/product-libelle-edimon) - [STA ITSM](https://www.legupsoftware.com/product-itsm-connector) - [VOQUZ samQ](https://www.legupsoftware.com/product-samq) - [Arch Floe](https://www.legupsoftware.com/product-floe) - [Arch Stelo](https://www.legupsoftware.com/product-stelo) - [Leg Up Software](https://www.legupsoftware.com/about) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) Copyright © 2023 LegUpSoftware  ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Rick Porter", "url" : "https://www.legupsoftware.com/expert_insights/author/rick-porter" }, "dateModified" : "2023-02-06T03:15:20.572Z", "datePublished" : "2022-11-16T01:15:00.000Z", "headline" : "Medibank – It just kept getting worse", "image" : [ "https://www.legupsoftware.com/hubfs/The%20Medibank%20data%20breach%20%E2%80%93%20It%20just%20keeps%20getting%20worse..jpg" ], "mainEntityOfPage" : { "@id" : "https://www.legupsoftware.com/expert_insights/he-medibank-data-breach-it-just-kept-getting-worse", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.legupsoftware.com/hubfs/Website,%20Dec%202022/Assets/logo.png" }, "name" : "Leg Up Software" } } ```