EBR Systems: Australian MedTech Firm EBR Systems Flags Possible Data Breach of Patient Records

EBR Systems Reports Cybersecurity Incident Impacting Patient Health Data

Medical technology firm EBR Systems disclosed a cybersecurity incident on Wednesday that may have exposed a limited amount of personal health information. The company detected a network disruption on February 13, prompting an investigation with third-party forensic specialists.

While the full scope of the breach remains under assessment, EBR Systems confirmed that unauthorized access occurred, though the volume of affected data appears small based on initial reviews. The incident did not disrupt core operations, and the company expects no material financial impact, citing cybersecurity insurance coverage for related costs.

The breach highlights Australia’s escalating cybersecurity risks, as the country faces a surge in data breaches and ransomware attacks across healthcare, financial, and government sectors over the past five years. EBR Systems has notified affected patients and published details on its website.

Source: https://www.insurancejournal.com/news/international/2026/04/15/865947.htm

EBR Systems, Inc. cybersecurity rating report: https://www.rankiteo.com/company/ebr-systems-inc-

"id": "EBR1776256526",
"linkid": "ebr-systems-inc-",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Limited number of patients',
                        'industry': 'Healthcare',
                        'location': 'Australia',
                        'name': 'EBR Systems',
                        'type': 'Medical Technology Firm'}],
 'customer_advisories': 'Notified affected patients',
 'data_breach': {'number_of_records_exposed': 'Limited (small volume based on '
                                              'initial reviews)',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal health information'},
 'date_detected': '2024-02-13',
 'date_publicly_disclosed': '2024-05-15',
 'description': 'Medical technology firm EBR Systems disclosed a cybersecurity '
                'incident that may have exposed a limited amount of personal '
                'health information. The company detected a network disruption '
                'on February 13, prompting an investigation with third-party '
                'forensic specialists. Unauthorized access occurred, though '
                'the volume of affected data appears small based on initial '
                'reviews. The incident did not disrupt core operations.',
 'impact': {'data_compromised': 'Personal health information',
            'financial_loss': 'No material financial impact (covered by '
                              'cybersecurity insurance)',
            'operational_impact': 'No disruption to core operations'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'EBR Systems Website'}],
 'response': {'communication_strategy': 'Notified affected patients and '
                                        'published details on website',
              'incident_response_plan_activated': 'Yes',
              'third_party_assistance': 'Third-party forensic specialists'},
 'title': 'EBR Systems Cybersecurity Incident Impacting Patient Health Data',
 'type': 'Data Breach'}