A major cyberattack on the healthcare provider Partnered Health has resulted in the theft of sensitive patient records from 21 clinics across Australia. The company, which operates over 60 medical centres nationwide, confirmed that a malicious actor gained unauthorized access to its systems on June 23. The breach has compromised a wide range of personal and medical information, raising significant privacy concerns for thousands of patients in cities including Sydney, Melbourne, and Canberra.
Stolen data includes names, dates of birth, addresses, and contact details. More critically, the attackers accessed medical information such as consultation notes, referral letters, and diagnostic results. Financial and government identification details, including Medicare numbers, private health insurance information, and veteran or concession card numbers, were also taken. Partnered Health has reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and law enforcement agencies.
In an effort to mitigate the fallout, Partnered Health has obtained an interim injunction from the New South Wales Supreme Court. This legal move aims to prevent the stolen data from being published or used by third parties. While the company is working to contain the incident and notify affected individuals, the full extent of the data exposure remains under investigation. Patients are being urged to remain vigilant regarding potential scams or identity theft attempts that may arise from the misuse of their personal details.