Cybersecurity Minister Claire O'Neill has vowed to bring the Russian hackers believed to be behind the Medibank data breach to justice.
Ms O'Neill said the government is launching a new cybersecurity policing operation to break networks of hackers stealing private information of Australian citizens.
"You're entitled to keep information about your health... completely private. That is your right and it's been stolen from you by Russian thugs," she told reporters in Melbourne.
"Our message today is that those thugs should watch out".
"We're going to hack the hackers".
Attorney-General Mark Drefyus said the joint standing cybercrime operation targeting the hackers will be led by the Australian Federal Police and the Australian Signal Directorate in a permanent and formalised arrangement.
"The AFP is working day and night on this problem. It's working with international partner agencies... including the FBI," he explained.
Mr Dreyfus said diplomatic channels with Russia would be open regarding extradition but maintained that will not slow down the work of national security agencies.
He called on Russia to do "all that it can do to ensure people who are within its borders are not engaging in this kind of criminal activity".
The announcement comes after AFP Commissioner Reece Kershaw confirmed a network of Russian criminals was behind the cyber attack on Australia's largest health insurer Medibank.
Mr Kershaw had a blunt message for the people responsible for the hack.
"We know who you are," he said.
"The AFP has some significant runs on the scoreboard when it comes to bringing overseas offenders back to Australia to face the justice system."
Mr Kershaw said the crime had the potential to impact millions of Australians and damage a significant Australian business.
"This cyber attack is an unacceptable attack on Australia and it deserves a response that matches the malicious and far-reaching consequences that this crime is causing," he said.
Mr Kershaw said talks would be held with Russian law enforcement about the individuals involved, who were known but would not be publicly named at this stage.
He emphasised Russia benefited from the intelligence sharing through Interpol "and with that comes responsibilities and accountabilities".
But the Russian Embassy in Canberra protested Mr Kershaw's assertion about the hack's Russian origins.
"For some reason, this announcement was made before the AFP even contacted the Russian side through the existing professional channels of communication"
"We encourage the AFP to duly get in touch with the respective Russian law enforcement agencies," it said in a statement.
Opposition cyber security spokesman James Paterson said the disclosure opened up the possibility of sanctions under Australia's Magnitsky regime.
The regime, passed with bipartisan support in December 2021, enables the imposition of targeted financial sanctions and travel bans in response to serious corruption and significant cyber incidents.
Prime Minister Anthony Albanese earlier told reporters he was "disgusted by the perpetrators of this criminal act", and he authorised the AFP boss to disclose the information.
The hackers have since released more sensitive details of customers' medical records on the dark web, including data on abortions and alcohol issues.
It follows Medibank's refusal to pay a ransom for the data, with almost 500,000 health claims stolen, along with personal information.
Medibank has created a one-stop shop of mental health and other support services that can be accessed by affected customers via its website.
Australian Associated Press
