HCi Factsheet – cybersecurity
Making health insurance easy – and safe!
HCi and cybersecurity – protecting your personal information
15 August 2025
In light of recent cybersecurity and data breaches, many HCi members may be concerned about the personal information and health data we hold. Thus, they want to better understand how we safeguard it.
HCi cybersecurity measures
HCi has a wide range of security controls, tools, and technologies in place. Together with an experienced team, this ensures a high standard of security and privacy for your data. And the capacity to quickly respond to perceived threats. We regularly review these processes to keep them appropriate, effective and up-to-date for maximum security.
If you have any concerns about your personal information with us, or notice any unusual activity on your OMS account, please contact us immediately.
Past cybersecurity breaches
If your Medicare number was exposed in any recent data breaches, this will not affect your HCi membership.
Importantly, HCi’s systems have not been compromised or impacted. We assure members that keeping your account and personal information secure is, and will remain, one of our top priorities.
What you can do to protect your personal information
While we work to keep your information safe, you need to protect yourself, too.
The key step is to not share your HCi password. Then be sure to log out each time you use OMS.
Follow these general cybersecurity tips to stay safe.
Recognise your personal information
Personal information is any information or combination of information that could identify you. Learn what pieces of information are personal, and how to protect them at the Government’s esafety site.
Maintain strong passwords
Setting a strong, unique password for each account/platform and changing them regularly, is key to keeping your online accounts safe and secure. And don’t leave your password written anywhere near your device!
Use Multifactor Authentication (MFA)
Verifying logins by a code generated on another device greatly enhances security. So if you have the option of using MFA, turn it on. MFA is compulsory to access OMS.
Look out for suspicious messages
Remain on the lookout for any suspicious emails, calls and text messages. If you’re unsure about any message from HCi, you can always contact us to verify its legitimacy. We will never ask for your password.
Think before you provide any data
For sensitive data, such as birth dates, banking details and Medicare numbers, ask yourself if the request is reasonable. If in doubt, try providing the information in a more secure way – type in a URL yourself rather than clicking an email link, call rather than email, or use a secure portal like OMS for submitting forms and medical documents.
Contacts for more cybersecurity information
ACSC – The Australian Cyber Security Centre. This is the Australian Government lead agency for cybersecurity for people and organisations.
Scamwatch – Run by the Australian Competition and Consumer Commission (ACCC). It provides information to consumers and organisations on how to recognise, avoid and report scams.
IDCARE – Helps individuals and organisations across Australia who have concerns about identity theft or related cybersecurity.
HCi used its best endeavours to ensure this information was accurate at the time of publication. From time to time, circumstances relating to the subject matter may change which may impact the accuracy of the information. This information is also general in nature and does not take into account any specific health or financial situation. Before making any decisions in relation to this information, you should consider your own financial and health situation and seek professional advice. Health Care Insurance Ltd ABN 43 009 579 088. A Registered Private Health Insurer.
