Update: Partnered Health – Recent Cyber Incident

As a further update on the cyber incident impacting Partnered Health, we're now aware that a malicious actor has published 11 files online that they claim includes personal information accessed from Partnered Health. The information was published on a part of the internet that cannot be accessed by standard search engines or browsers.

Our cyber experts have continued to monitor these channels as part of our ongoing investigation, and available evidence indicates this publication by the malicious actor relates to the recent incident that impacted some parts of our network. We are urgently reviewing the material to assess its authenticity and determine whether it contains personal information.

As our investigation has progressed, we have identified that some additional patients who attended our Indooroopilly practice, and some employees have also been impacted. We are in the process of directly notifying these individuals to make them aware of the incident and provide practical steps they can take to help protect themselves.

This latest development is not a new incident and does not change the advice already provided in our notifications.

We sincerely apologise for any concern this incident has caused and recognise the importance our patients and our people place on the security of their personal information.

We encourage impacted individuals to continue following the advice we have provided by email and on our dedicated support website at www.partneredhealth.com.au/support. If we identify any need to communicate further with patients because of this publication, we will do so promptly.

We understand the importance our patients and our people place on the security of their personal information, and we sincerely apologise for any concern this incident has caused.

We are also aware the malicious actor has made claims regarding the data accessed from Partnered Health. While we are urgently working to check these claims, it should be noted that statements made by malicious actors following a cyber incident should not be assumed to be accurate.

To help protect our patients and people, Partnered Health previously obtained an injunction from the Supreme Court of New South Wales, ordering that the accessed data is not used or published.

Partnered Health has previously reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and law enforcement and is continuing to work with the authorities.

We will provide further updates as our investigation continues and new relevant information becomes available.

On 23 June 2026, Partnered Health became aware that a malicious actor accessed some of our data.

In response, Partnered Health engaged specialist cyber experts to provide advice. We took immediate steps to contain the incident and assess whether personal information was accessed. This investigation remains ongoing.

Our investigations to date have confirmed that personal information (including health information) was taken from some of the clinics in our network. We are continuing to investigate the extent to which personal information has been impacted by this incident and are communicating with patients from impacted clinics.

As a health services provider, we know our patients and our people trust us with personal and medical information and we sincerely apologise for any concern and inconvenience this may cause them.

Partnered Health has reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and law enforcement, and we are continuing to work with the authorities.

We have set up a dedicated website page at https://www.partneredhealth.com.au/support with further information, including steps our patients can take to help protect their personal information. We will provide updates on the website as our investigation continues and new relevant information becomes available.

To help protect our patients and people, we have obtained an interim injunction from the Supreme Court of New South Wales ordering that the accessed data is not used or published.

Information that may be affected

This incident may have affected personal information patients have provided to us, or which was collected while providing patients with healthcare services.

This may include:

• name, date of birth, address and contact details;
• Medicare number and, where applicable, private health insurance or Veteran Card (DVA) number or concession card number; and
• medical information and treatment details, including consultation notes, referral letters, and pathology or diagnostic results recorded by a GP or other medical professionals at our clinics.

Steps people can take to help protect their personal information

While we are still investigating the data and do not currently know the extent of personal information that has been impacted, as a precaution people can take the following steps to help protect their information:

• be alert to any suspicious emails, text messages or phone calls, including communications that are disguised to look like they come from someone you know or trust;
• verify the identity of the sender before responding, including checking email addresses and phone numbers rather than relying on the name displayed;
• do not click on links or open attachments in messages that look unusual or unexpected;
• ensure you use strong unique passwords for all accounts and enable multi-factor authentication where available;
• never provide personal, financial or account information in response to an unsolicited request, regardless of how legitimate it appears;
• if you're unsure whether a link or offer is genuine, go directly to the organisation's website or contact them using details you already have, rather than the details provided in the message;
• monitor your accounts for unusual activity and contact your bank if you notice anything suspicious; and
• visit www.scamwatch.gov.au for further information on current scam trends.

The practices that have been impacted include:

• Blackburn Road Medical Centre
• Broadway General Practice
• Bundall Medical Centre
• Cardiff Medical Centre & Skin Cancer Clinic
• Castle Hill Family Doctors
• Champion Drive Medical Centre
• Chancellor Park Family Medical Practice
• Dromana Family Doctors
• Dural Medical Centre
• Indooroopilly General Practice
• Joondalup City Medical Group
• Kealba Family Practice
• Mornington Family Doctors
• Noosaville Seven Day Medical Centre
• North Canberra Family Practice
• Park Beach Family Practice
• Park Orchards Family Practice
• Rockingham City Family Practice
• Sans Souci Medical Practice
• Templestowe District Medical Centre
• Wentworth Avenue Family Practice
• Wyong Family Practice