Partnered Health cyber attack exposes patient medical records across clinic network
One of Australia’s largest clinical networks has suffered a major cyber attack; Stolen patient files are now raising fears that sensitive medical information could be exposed or exploited.
Partnered Health, which operates 57 GP practices and skin cancer clinics across the country, said hackers had accessed and obtained personal information, including health records, from some clinics on its network after the company became aware of the breach on June 23.
The provider said it was working with police, the Australian Cyber Security Center and specialist cyber experts as it tried to determine the full extent of the attack. Some affected patients were contacted late Tuesday afternoon.
In an incident statement posted online, Partnered Health said its investigations had already confirmed data had been received.
“Our investigations to date have confirmed that personal information, including health information, is received from some clinics in our network,” the company said.
“We are continuing to investigate and are contacting patients at affected clinics.”
The company listed 16 clinics in Melbourne, Sydney, Canberra, Gold Coast, Sunshine Coast and Coffs Harbor where patient information may have been stolen.
A further five clinics remained under investigation, including some in Western Australia.
You can find a list of affected clinics here Here.
Potentially compromised information included names, contact details, addresses, Medicare information, private health insurance details and highly sensitive medical documents such as consultation notes, referral letters and pathology results.
Partnered Health said it took action to limit the consequences and obtained emergency court orders to prevent the stolen information from being shared.
“To help protect our patients and people, we have obtained an injunction from the Supreme Court of New South Wales not to use or publish the accessed data,” the statement said.
Patients are also warned to be wary of scam emails, texts or phone calls that may reference private medical details to appear legitimate.
The company said it contacted Services Australia to assist with extra monitoring of individuals whose Medicare information may have been caught in the breach.
