Patient details exposed in cyberattack on Australian healthcare provider
An Australian healthcare provider has suffered a cyberattack in which personal information including test results, consultation notes and Medicare details were stolen from 21 clinics in its national network.
Partnered Health notified patients about the cyberattack on Wednesday, three weeks after realizing a “malicious actor” had accessed their data.
Clinics in Ultimo, Castle Hill, Sans Souci and Dural are among Sydney general practices where personal medical information was stolen, including diagnostic and pathology results recorded at the clinics and consultation notes and referral letters held by the practices. Personal information such as home addresses, private health insurance details and Medicare details were also seized.
Data was also breached at partner health clinics in Victoria, Queensland, Western Australia and the ACT. While Partnered Health continues to investigate what data may have been extracted, the extent of damage caused by the cyberattack has not yet been measured at five clinics, three in Western Australia and two in Victoria.
“While there is no direct evidence that patient records were viewed, we have written to patients at these clinics as a precaution to make them aware of this and provide details of steps that can be taken to protect their information,” a Partnered Health spokesperson wrote in a message to customers on Wednesday.
“We understand that such news may cause concern. We sincerely apologize for any distress this may have caused our patients.”
Founded in 2013, Partnered Health has 60 clinics across Australia. It describes itself as one of the country’s “leading healthcare providers”, bringing together “many of Australia’s most trusted names in healthcare” with a “reputation for excellence”.
The cyber attack was reported to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and law enforcement to investigate the origins and circumstances of the breach.
Partnered Health obtained an injunction from the Supreme Court of NSW to prevent the accessed data from being used or published. It is unclear how many patients were affected by the data breach and what data may have been stolen.
Partnered Health has been contacted for comment.
Joint Health clinics were subjected to cyber attack
- Champion Drive Medical Center (WA)
- Dromana Family Doctors (VIC)
- Joondalup City Medical Group (WA)
- Kealba Family Medicine (VIC)
- City of Rockingham Family Medicine (WA)
- Blackburn Road Medical Center (VIC)
- Broadway General Practice (NSW)
- Bundall Medical Center (QLD)
- Cardiff Medical Center and Skin Cancer Clinic (NSW)
- Castle Hill Family Doctors (NSW)
- Chancellor Park Family Medicine Practice (QLD)
- Dural Medical Center (NSW)
- Mornington Family Doctors (VIC)
- Noosaville Seven Day Medical Center (QLD)
- Northern Canberra Family Practice (ACT)
- Park Beach Family Practice (NSW)
- Park Orchards Family Medicine (VIC)
- Sans Souci Medical Practice (NSW)
- Templestowe District Medical Center (VIC)
- Wentworth Street Family Practice (ACT)
- Wyong Family Practice (NSW)
Be the first to know when important news happens. Sign up for breaking news alerts Turn on notifications in email or in the app.
Daniel Lo Surdo is a breaking news reporter for The Sydney Morning Herald. He previously ran The Sydney Morning Herald and The Age’s national news live blog.Connect via email.
