Partnered Health Group: Partnered Health hack: Major health network hit in cyber attack, impacted centres named

Cyberattack Targets Major Australian Healthcare Network, Exposing Patient Data

A significant cyberattack has compromised the personal and medical records of patients across Partnered Health Group, a network of over 60 clinics in Australia, including general practices and skin cancer centers. The breach, detected on June 23, was disclosed by the organization on Wednesday, more than three weeks after the incident.

The attack involved a "malicious actor" who accessed and exfiltrated sensitive data, including names, dates of birth, addresses, contact details, Medicare numbers, and medical treatment records. Partnered Health confirmed that some clinics within its network were affected but is still investigating the full scope of the breach.

In response, the group has reported the incident to the Australian Cyber Security Centre (ACSC), the Office of the Australian Information Commissioner (OAIC), and law enforcement. Additionally, Partnered Health secured an interim injunction from the NSW Supreme Court to prevent the stolen data from being used or published.

Affected clinics include locations in New South Wales, Victoria, Queensland, Western Australia, and the Australian Capital Territory, such as Blackburn Road Medical Centre, Broadway General Practice, and Joondalup City Medical Group, among others. The organization has begun notifying impacted patients while continuing to work with authorities.

Source: https://thenightly.com.au/australia/partnered-health-hack-major-health-network-hit-in-cyber-attack-impacted-centres-named-c-22583523

Partnered Health Medical Centres cybersecurity rating report: https://www.rankiteo.com/company/partnered-health-medical-centres

"id": "PAR1784118406",
"linkid": "partnered-health-medical-centres",
"type": "Cyber Attack",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Patients across affected '
                                              'clinics',
                        'industry': 'Healthcare',
                        'location': 'Australia',
                        'name': 'Partnered Health Group',
                        'size': '60+ clinics',
                        'type': 'Healthcare Network'},
                       {'industry': 'Healthcare',
                        'location': 'New South Wales, Australia',
                        'name': 'Blackburn Road Medical Centre',
                        'type': 'Clinic'},
                       {'industry': 'Healthcare',
                        'location': 'New South Wales, Australia',
                        'name': 'Broadway General Practice',
                        'type': 'Clinic'},
                       {'industry': 'Healthcare',
                        'location': 'Western Australia, Australia',
                        'name': 'Joondalup City Medical Group',
                        'type': 'Clinic'}],
 'customer_advisories': 'Notifying impacted patients',
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': ['Names',
                                                         'Dates of birth',
                                                         'Addresses',
                                                         'Contact details',
                                                         'Medicare numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal data',
                                              'Medical records']},
 'date_detected': '2024-06-23',
 'date_publicly_disclosed': '2024-07-17',
 'description': 'A significant cyberattack has compromised the personal and '
                'medical records of patients across Partnered Health Group, a '
                'network of over 60 clinics in Australia, including general '
                'practices and skin cancer centers. The breach involved a '
                'malicious actor who accessed and exfiltrated sensitive data, '
                'including names, dates of birth, addresses, contact details, '
                'Medicare numbers, and medical treatment records.',
 'impact': {'data_compromised': 'Personal and medical records (names, dates of '
                                'birth, addresses, contact details, Medicare '
                                'numbers, medical treatment records)',
            'identity_theft_risk': 'High'},
 'investigation_status': 'Ongoing',
 'ransomware': {'data_exfiltration': 'Yes'},
 'references': [{'source': 'Cyber Incident Description'}],
 'regulatory_compliance': {'legal_actions': 'Interim injunction from the NSW '
                                            'Supreme Court to prevent stolen '
                                            'data from being used or published',
                           'regulatory_notifications': ['Australian Cyber '
                                                        'Security Centre '
                                                        '(ACSC)',
                                                        'Office of the '
                                                        'Australian '
                                                        'Information '
                                                        'Commissioner (OAIC)']},
 'response': {'communication_strategy': 'Notifying impacted patients',
              'law_enforcement_notified': 'Yes'},
 'threat_actor': 'Malicious actor',
 'title': 'Cyberattack Targets Major Australian Healthcare Network, Exposing '
          'Patient Data',
 'type': 'Data Breach'}