A major Australian healthcare provider, Partnered Health, has confirmed that a malicious actor accessed its systems and stole sensitive patient information from 21 clinics across the country. The company, which operates more than 60 medical centres nationwide, became aware of the security breach on June 23, 2026. After a three-week investigation, the provider notified the public that personal and medical data had been compromised, prompting immediate reports to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and law enforcement.
The stolen data includes personally identifiable information such as names, dates of birth, residential addresses, and contact details. Additionally, the breach compromised sensitive health-related information, including Medicare numbers, private health insurance details, consultation notes, referral letters, and pathology or diagnostic results. While the full extent of the impact is still being assessed, Partnered Health has identified 21 affected clinics in states including New South Wales, Victoria, Queensland, Western Australia, and the Australian Capital Territory.
In response to the theft, Partnered Health has sought and secured an interim injunction from the Supreme Court of New South Wales to prevent the stolen data from being used or published. The company is currently working with authorities to mitigate the damage and has begun the process of contacting affected patients. Patients are being advised to remain vigilant against potential scams or phishing attempts that may use their stolen medical records to appear legitimate. The incident highlights the ongoing cybersecurity risks facing the healthcare sector as providers manage increasingly large and distributed digital databases.