Partnered Health cyberattack exposes patient records across Australian clinics

Partnered Health, a national network of more than 60 general practice and skin‑cancer clinics in Australia, confirmed that a malicious actor accessed its systems on 23 June 2026. The breach affected at least 16 clinics and up to 21 locations, including sites in Canberra, Sydney, Melbourne, the Gold Coast, Sunshine Coast and Coffs Harbour. Personal and health information – names, dates of birth, addresses, telephone numbers, Medicare and private‑health details, as well as clinical notes, referral letters and pathology reports – was taken.

The provider reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and police, and secured an interim injunction from the New South Wales Supreme Court to prevent the stolen data from being used or published. Affected patients have been notified and advised to watch for phishing attempts that reference their medical details. Partnered Health is working with Services Australia to monitor Medicare accounts and with cyber‑security specialists to investigate the full scope of the attack.

The breach highlights ongoing cyber‑security challenges in the Australian health sector, where sensitive medical records are a valuable target for criminals and may prompt tighter regulatory standards.