Partnered Health Group and Joondalup City Medical Group: Bupa-target Partnered Health hit by cyberattack before acquisition

Partnered Health Group Hit by Cyberattack, Exposing Patient Data Across Australia

On June 23, Partnered Health Group, which operates over 20 medical centers across Australia including North Canberra Family Practice (ACT) and Joondalup City Medical Group (WA) fell victim to a cyberattack by a "malicious actor." The breach, disclosed by the group on Wednesday, may have compromised sensitive patient data, including pathology results.

The incident occurred three weeks before the public announcement, raising concerns about the security of private medical information. Partnered Health Group, which was recently acquired by Bupa, has begun notifying affected patients about the potential exposure.

The attack highlights ongoing cybersecurity risks in the healthcare sector, particularly as organizations undergo transitions like acquisitions. No further details on the attacker’s identity or the full extent of the breach have been released.

Source: https://www.afr.com/companies/healthcare-and-fitness/bupa-target-partnered-health-hit-by-cyberattack-ahead-of-acquisition-20260715-p60fnb

MyClinic Group cybersecurity rating report: https://www.rankiteo.com/company/myclinic-group

Partnered Health cybersecurity rating report: https://www.rankiteo.com/company/partnered-health

"id": "MYCPAR1784104485",
"linkid": "myclinic-group, partnered-health",
"type": "Cyber Attack",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Patients of North Canberra '
                                              'Family Practice (ACT) and '
                                              'Joondalup City Medical Group '
                                              '(WA)',
                        'industry': 'Healthcare',
                        'location': 'Australia',
                        'name': 'Partnered Health Group',
                        'size': 'Operates over 20 medical centers',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Notifying affected patients about potential exposure',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Patient data, pathology results'},
 'date_detected': '2024-06-02',
 'date_publicly_disclosed': '2024-06-23',
 'description': 'Partnered Health Group, which operates over 20 medical '
                'centers across Australia, fell victim to a cyberattack by a '
                "'malicious actor.' The breach may have compromised sensitive "
                'patient data, including pathology results.',
 'impact': {'data_compromised': 'Sensitive patient data, including pathology '
                                'results',
            'identity_theft_risk': 'High'},
 'investigation_status': 'Ongoing',
 'references': [{'date_accessed': '2024-06-23',
                 'source': 'Cyber Incident Description'}],
 'response': {'communication_strategy': 'Notifying affected patients'},
 'threat_actor': 'Malicious actor',
 'title': 'Partnered Health Group Cyberattack Exposing Patient Data',
 'type': 'Data Breach'}