Partnered Health, one of Australia's largest healthcare providers, has disclosed a cyber-attack affecting 21 clinics across Sydney, Melbourne, and Canberra. Personal information and medical records were compromised in the breach.
Partnered Health, owned by private equity firm Quadrant, confirmed the security incident exposed patient data including personal information and medical details from multiple clinic locations.
The breach affected 21 clinics operating under the Partnered Health network across several major Australian cities. The company has not yet disclosed the exact number of patients impacted or provided a timeline for when the attack occurred.
Patient medical records typically contain sensitive information including names, contact details, insurance information, and clinical notes. This data is highly valuable to cybercriminals and poses significant privacy risks to affected individuals.
The incident adds to a growing list of healthcare sector cyber-attacks globally. Healthcare providers are frequent targets due to the value of medical records and the critical nature of their operations, which can be disrupted through ransomware attacks.
Partnered Health has not released details about the attack method, whether ransom was demanded, or whether any systems remain compromised. The company has not announced specific measures being offered to affected patients, such as credit monitoring or identity theft protection services.
Australian privacy regulators may investigate the breach under the Privacy Act, which requires organizations to notify individuals of data breaches that pose serious risk to their privacy. Healthcare providers can face significant penalties for inadequate data protection.
The breach highlights ongoing cybersecurity challenges in the healthcare sector, where outdated systems, resource constraints, and the sensitivity of patient data create particular vulnerabilities.
Security firm Intruder has developed an AI-powered system that automatically identifies previously unknown software vulnerabilities by combining code analysis with large language models. The tool already discovered and exploited a WordPress plugin zero-day.
U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.
Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.