Cyberattack exposes patient data in Australian GP clinics network
Consensus Summary
A cyberattack on Partnered Health, a major Australian healthcare provider operating over 50 general practice and skin cancer clinics, exposed patient data from at least 21 clinics across cities including Sydney, Melbourne, and Canberra. The breach was discovered on June 23, with stolen data including personal details, Medicare information, and sensitive medical records. Partnered Health, which has over 60 medical centres nationwide, sought legal protection through an interim injunction in the Supreme Court of New South Wales. The incident follows a record 8% increase in data breach notifications in 2025, with 1,205 reported breaches, including a separate incident affecting 5.7 million Qantas customers. While sources agree on the core facts, discrepancies exist in the total number of clinics impacted and ownership details, with the ABC highlighting 16 confirmed clinics plus five under investigation, and the Guardian noting ownership by Quadrant. The breach underscores growing cybersecurity risks in Australia’s healthcare sector.
✓ Verified by 2+ sources
Key details reported by multiple sources:
- 21 clinics were affected by the cybersecurity breach
- Partnered Health operates over 50 general practice and skin cancer clinics
- The breach was discovered on June 23
- 5.7 million customers' data was compromised in a separate 2025 breach (Qantas)
- 1,205 data breach notifications were reported in the 2025 calendar year
- The 2025 breach notifications represent an 8% increase from 2024
- Partnered Health sought an interim injunction from the Supreme Court of New South Wales to protect stolen data
- The breach occurred in 2025 (implied by 2025 calendar year notifications and June 23 discovery)
Points of Difference
Details reported by only one source:
- The breach affected 21 clinics across several Australian cities (no further location details provided)
- 16 clinics were confirmed as impacted, with another five under investigation for potential data theft
- Partnered Health runs 57 clinics across the country (specific count)
- The breach included personal details (names, contact details, addresses, Medicare, private health insurance details) and sensitive medical records (consultation notes, referral letters, pathology results)
- Partnered Health is being acquired by health insurer Bupa (mentioned in June)
- The Australian Signals Directorate (ASD) warned of a surge in Russian-linked cyberattacks targeting poorly protected router networks
- Partnered Health has engaged cyber experts to assess the stolen data further
- Partnered Health was established in 2013
- Partnered Health has more than 60 medical centres nationwide, including skin cancer, allied health, and mental health clinics
- The breach affected clinics in Sydney, Melbourne, and Canberra (specific locations)
- Partnered Health is owned by private equity firm Quadrant (not mentioned in other sources)
- The breach included medical information and treatment details (consultation notes, referral letters, pathology or diagnostic results)
Contradictions
Conflicting information between sources:
- The ABC states Partnered Health operates 57 clinics, while the Guardian states it operates more than 60 medical centres
- The ABC mentions 16 confirmed clinics and another five under investigation, while SBS and Guardian only mention 21 clinics affected without further breakdown
- The Guardian specifies Partnered Health is owned by Quadrant, but this detail is not mentioned in SBS or ABC
- The ABC states the breach was discovered on June 23, while the Guardian states the breach occurred on 23 June (same date but phrasing differs slightly)
Source Articles
Australian patient details exposed in GP network cyberattack
Partnered Health said that 21 clinics across several Australian cities had been affected by a cybersecurity breach.
GP clinic network hit by major cyber breach
Partnered Health, which operates more than 50 general practice and skin cancer clinics across Australia, has identified more than a dozen clinics where it fears patient information was taken.
Patient records stolen in cyber-attack on Australian healthcare provider
Partnered Health says personal information and medical details and notes were breached in the attack on 21 clinics Get our breaking news email , free app or daily news podcast Thousands of medical records and patient information stored with one of Australia’s biggest healthcare providers have been breached in a cyber-attack. Partnered Health, owned by private equity firm Quadrant, said 21 clinics across several cities including Sydney, Melbourne and Canberra have been affected by the breach whic