Data Breach Alert What You Need to Know About the Partnered Health Cyber Attack.
Unfortunately, a recent cyber security incident has shaken the Australian medical sector. Partnered Health, a major national medical group operating over 50 GP and skin cancer clinics, has confirmed that it fell victim to a sophisticated cyber attack, leaving the sensitive data of thousands of patients at risk.
If you are a patient of Partnered Health or have visited one of their clinics, it is critical to understand what happened, what information may have been compromised, and the proactive steps you should take to protect your identity.
What Happened at Partnered Health?
Partnered Health, which provides a broad range of medical services across Australia, recently detected unauthorized access to its internal systems. Forensic investigations confirmed that hackers infiltrated the network, potentially exfiltrating a significant volume of personal and clinical data.
While the investigation is ongoing, the breach is considered severe due to the deeply personal nature of the information involved.
What Information Was Exposed?
The cyber criminals may have accessed a wide array of identifying and sensitive information, including:
- Personal Identification: Full names, dates of birth, and home addresses.
- Government & Financial Data: Medicare numbers and private health insurance details.
- Clinical Records: Consultation notes, referral letters, and pathology/lab results.
Cyber security experts warn that this type of data is high-value on the dark web. There is a significant risk that the attackers may attempt to ransom the company or, more dangerously, use the information to launch targeted phishing campaigns or identity theft operations against affected individuals.
Steps You Should Take to Protect Yourself
If you believe your data may have been compromised in this breach, do not wait for official correspondence to take action. Follow these immediate steps to secure your digital footprint:
1. Monitor Your Accounts
Keep a close eye on your bank statements, credit reports, and your MyGov account. Look for any unauthorized transactions or unexpected notifications regarding changes to your personal details.
2. Be Wary of “Phishing” Attempts
Because the attackers have your clinical notes and personal details, they may contact you via phone, email, or SMS, pretending to be your GP or a government health agency.
- Never click links in unexpected messages.
- Be suspicious of anyone asking for passwords, credit card numbers, or further medical information over the phone.
- Verify any request by calling the clinic directly using a phone number you have sourced independently (e.g., from their official website).
3. Change Your Passwords
If you use the same password for your health portal as you do for your email or banking, change your passwords immediately. Enable Multi-Factor Authentication (MFA) on every account where it is available.
4. Report Suspicious Activity
If you detect identity theft, report it immediately to IDCARE, Australia’s national identity and cyber support service. You can also report scams via the ACCC Scamwatch website.
The Broader Impact on Healthcare Security
This incident serves as a stark reminder of the vulnerability of medical service providers. As clinics transition to electronic health records, they become high-priority targets for criminal syndicates.
“Health data is more valuable than credit card numbers on the black market because it cannot be easily changed,” explains a lead cyber security consultant. “Once a Medicare number or a pathology result is leaked, that information remains compromised indefinitely.”
Staying Informed
Partnered Health is currently working with government authorities and cyber security experts to contain the breach. Patients are encouraged to monitor the Partnered Health official website for updates on the investigation and for any support services the company may begin offering to affected individuals.
Need Help?
- IDCARE: 1800 595 160
- OAIC: Visit the Office of the Australian Information Commissioner to learn about your privacy rights.
- My Health Record: If you are concerned about your digital medical record, log in to your My Health Record via MyGov to review your access logs.
