NSW Health Nurse Charged in Alleged Patient Data Breach
A 59-year-old registered nurse employed by NSW Health has been charged following a police investigation into an alleged data breach involving patient information. The incident came to light after NSW Health reported the breach to authorities, prompting an inquiry by State Crime Command’s Cybercrime Squad under Strike Force Civic.
On July 23, detectives executed a search warrant at the nurse’s home in Frenchs Forest, seizing multiple electronic devices suspected of containing unauthorized patient data. The man was subsequently arrested and taken to Manly Police Station, where he was charged with access/modify restricted data held in computer. He was granted bail and is scheduled to appear in Manly Local Court on August 19.
Detective Superintendent Matt Craft of the Cybercrime Squad stated that NSW Police acted swiftly upon notification from NSW Health, allowing for the immediate seizure of devices. Forensic specialists are now examining the recovered data to determine whether it was shared beyond the accused. Initial findings suggest the breach was contained to the individual, though investigations remain ongoing.
Authorities emphasized the seriousness of the alleged breach, describing it as a violation of professional and public trust. NSW Police continue to collaborate with NSW Health to address the incident.
Source: https://www.cyberdaily.au/security/13970-nsw-cybercrime-squad-charge-nurse-over-alleged-data-breach
NSW Health cybersecurity rating report: https://www.rankiteo.com/company/nsw-health_931018
"id": "NSW1785291832",
"linkid": "nsw-health_931018",
"type": "Breach",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'New South Wales, Australia',
'name': 'NSW Health',
'type': 'Healthcare Provider'}],
'attack_vector': 'Insider Threat',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (Patient data)',
'type_of_data_compromised': 'Patient information'},
'description': 'A 59-year-old registered nurse employed by NSW Health has '
'been charged following a police investigation into an alleged '
'data breach involving patient information. The incident came '
'to light after NSW Health reported the breach to authorities, '
'prompting an inquiry by State Crime Command’s Cybercrime '
'Squad under Strike Force Civic. The nurse was arrested and '
'charged with access/modify restricted data held in computer.',
'impact': {'brand_reputation_impact': 'Violation of professional and public '
'trust',
'data_compromised': 'Patient information'},
'investigation_status': 'Ongoing',
'references': [{'source': 'NSW Police'}],
'regulatory_compliance': {'legal_actions': 'Criminal charge (access/modify '
'restricted data held in '
'computer)'},
'response': {'containment_measures': 'Seizure of electronic devices',
'law_enforcement_notified': 'Yes (NSW Police)',
'remediation_measures': 'Forensic examination of recovered data'},
'threat_actor': 'Insider (Registered Nurse)',
'title': 'NSW Health Nurse Charged in Alleged Patient Data Breach',
'type': 'Data Breach'}