Thousands of medical records and patient information stored with Partnered Health, one of Australia’s biggest healthcare providers, have been breached in a cyber-attack. The company, owned by private equity firm Quadrant, said 21 clinics across Sydney, Melbourne, and Canberra were affected by the breach on 23 June.
Details of the Breach
Partnered Health confirmed that personal information, including health information, was taken from some clinics. The stolen data includes names, dates of birth, addresses, contact details, Medicare numbers, private health insurance details, and concession card information. Medical information such as consultation notes, referral letters, and pathology or diagnostic results recorded by a GP were also breached.
The healthcare group reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and law enforcement. It described the attacker as a malicious actor.
Legal Action and Impact
Partnered Health has sought an interim injunction from the Supreme Court of New South Wales to prevent the accessed data from being used or published. The company apologized for any concern and inconvenience caused, acknowledging the trust placed in them by patients and staff.
Established in 2013, Partnered Health operates over 60 medical centres nationwide, along with skin cancer, allied health, and mental health clinics, serving more than 5 million people. In June, Bupa announced it was acquiring Partnered Health, making it the latest major business hit by hackers.
Rising Data Breach Notifications
Data breach notifications to the Office of the Australian Information Commissioner reached a record high in 2025, with 1,205 notifications—an 8% increase from 2024. Major incidents included a cyber-attack on Qantas that compromised the details of 5.7 million customers, with data reportedly leaked on the dark web.
