Partnered Health Reports Cyber Attack That Accessed Patient Data at 16 Clinics

Partnered Health detected a cyber attack on June 23 that accessed and stole medical records and personal information from its network. The operator of 57 general practice and skin cancer clinics identified 16 locations where patient data may have been taken and is still investigating five additional sites.

The stolen information includes consultation notes, referral letters, pathology results, patient names, contact details, addresses, Medicare numbers, and private health insurance details.

The 16 confirmed or suspected clinics are located in Melbourne, Sydney, Canberra, Gold Coast, Sunshine Coast, and Coffs Harbour, with Cardiff Medical Centre and Skin Cancer Clinic among those affected. Partnered Health obtained an interim injunction from the Supreme Court of New South Wales ordering that the accessed data not be used or published.

The company is working with the Australian Cyber Security Centre and police, and has contacted Services Australia to arrange additional monitoring for patients whose Medicare details may have been stolen.

Some affected patients were contacted by Partnered Health on July 15. The company warned patients to be wary of scam contacts referencing their medical records. Partnered Health is being acquired by health insurer Bupa.

On July 14 the Australian Signals Directorate joined partner agencies worldwide to warn of a surge in Russian-linked cyber attacks targeting poorly protected router networks in critical infrastructure.