Partnered Health, one of Australia's largest healthcare providers, has confirmed that patient records including medical details were stolen in a cyber-attack affecting 21 clinics across Sydney, Melbourne, and Canberra. The breach occurred on 23 June, and the company has sought an interim injunction from the Supreme Court of New South Wales to prevent the stolen data from being used or published.
Data Breach Details
The stolen information includes names, dates of birth, addresses, contact details, Medicare numbers, private health insurance details, and concession card numbers. Additionally, medical information such as consultation notes, referral letters, and pathology or diagnostic results recorded by a general practitioner were accessed. Partnered Health reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and law enforcement.
Company Response
Partnered Health, owned by private equity firm Quadrant, stated, “Our investigations to date have confirmed that personal information (including health information) was taken from some of the clinics in our network. As a health services provider, we know our patients and our people trust us with personal and medical information and we sincerely apologise for any concern and inconvenience this may cause them.” The company described the attacker as a “malicious actor” and has taken legal action to protect the data.
Broader Context
The breach comes as Bupa announced in June its acquisition of Partnered Health. Data breach notifications in Australia reached a record high in 2025, with 1,205 notifications reported to the Office of the Australian Information Commissioner, an 8% increase from 2024. Major incidents include a cyber-attack on Qantas that compromised details of 5.7 million customers, with data reportedly leaked on the dark web. Partnered Health, established in 2013, operates over 60 medical centres nationwide, including skin cancer, allied health, and mental health clinics, serving more than 5 million people.
