UPDATE – 31 July 2026
If you received an SMS or email from Indooroopilly clinic, please read below:
This page provides further information for anyone who has attended one of our clinics or received an SMS, or email from Partnered Health, or one of our clinics, about a recent cyber incident. Partnered Health is a national healthcare network that delivers a range of healthcare services.
The information below explains what happened, which clinics are affected, what we have done in response, and the steps you can take to protect your information.
Please read the information below carefully, as there are different steps you may need to take to protect your personal information, depending on which of our clinics you have visited.
We understand that this sort of news can cause concern. We sincerely apologise for any distress this may have caused our patients.
What has happened
Partnered Health recently became aware that a malicious actor accessed some of our data.
In response, Partnered Health engaged specialist cyber experts to provide advice. We took immediate steps to contain the incident and assess whether personal information was accessed. This investigation remains ongoing.
Our investigations to date have confirmed that personal information (including health information) was taken from some of the clinics in our network. We are continuing to investigate and we are communicating with patients from impacted clinics.
Partnered Health has reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and law enforcement. We are continuing to work with the authorities.
To help protect our patients and people we have obtained an interim injunction from the Supreme Court of New South Wales ordering that the accessed data is not used or published.
We know some patients have asked why it took time to notify them about this cyber incident.
We were made aware on 23 June that a malicious actor had accessed our system. Our priority was to secure our systems to prevent any further unauthorised access and to investigate what had happened. This included engaging specialist cyber experts to provide advice, contain the incident, and assess the nature and extent of any personal information that may have been accessed.
These investigations are highly complex and technical. It was important that we could provide patients with accurate, specific information rather than incomplete or unclear advice.
As soon as we confirmed that patient records had been taken from some of our clinics, we prepared to notify affected patients by email and SMS. This also meant making sure we had people prepared with the information they needed to support patients and respond to questions, including in our practices and through the dedicated contact centre.
We have also worked with law enforcement, liaised with the Australian Cyber Security Centre, and obtained an injunction against the malicious actor.
We want to thank patients for their patience and understanding during this time, and we will continue to provide updates if more information becomes available.
Impacted data
We are continuing to investigate the extent to which personal information has been impacted by this incident.
At this stage of our ongoing investigation, we believe that the impact of the cyber incident differs across our clinics.
We are aware that the malicious actor has made claims regarding the data they have accessed from Partnered Health. While we are urgently working to verify these claims, it should be noted that claims made by malicious actors following a cyber incident are not verified and should not be assumed to be accurate, however it does not change the advice outlined below.
Below, we have listed the clinics that were impacted by this incident, and the corresponding steps you can take to protect your personal information. If the clinic you visited is not listed below, we have no current evidence that it is impacted. As our investigation is ongoing, if anything changes, we will provide an update to impacted patients.
| Category and personal information | Clinics | Next Step |
| Category A Clinics at which we are continuing to investigate the extent to which personal information has been impacted by this incident. As a precaution we have written to patients to make you aware of the incident and provide details of the additional steps you can take to help protect yourself. If Partnered Health becomes aware that specific personal information of employees, patients or doctors has been impacted as part of this incident, we will promptly communicate with the individual with information and to provide support. | Champion Drive Medical Centre Dromana Family Doctors Joondalup City Medical Group Kealba Family Practice Rockingham City Family Practice | See Section A below |
| Category B Clinics at which this incident has affected personal information which forms part of your healthcare record with us, including personal information you have provided to us, or which was collected while providing you with care. This may include: • name, date of birth, address and contact details; • Medicare card number and, where applicable, your private health insurance or Veteran Card (DVA) number or concession card number; and • your medical information and treatment details, including consultation notes, referral letters, and pathology or diagnostic results recorded by your GP or other medical professionals you have visited at our clinic. We have written to patients from these clinics to make them aware of this and provide details of steps that can be taken to protect their information. | Blackburn Road Medical Centre Broadway General Practice Bundall Medical Centre Cardiff Medical Centre & Skin Cancer Clinic Castle Hill Family Doctors Chancellor Park Family Medical Practice Dural Medical Centre Indooroopilly General Practice Mornington Family Doctors Noosaville Seven Day Medical Centre North Canberra Family Practice Park Beach Family Practice Park Orchards Family Practice Sans Souci Medical Practice Templestowe District Medical Centre Wentworth Avenue Family Practice Wyong Family Practice | See Section B below |
| Category C If the clinic you attend is not listed in Category A or B above, based on our current investigation it is not impacted. If we identify any information that changes our view, we will update the website and contact patients of that clinic. | The Partnered Health clinics that are not listed above were not impacted by this incident based on known information. For a list of all our clinic locations, please see our website: https://partneredhealthmedicalcentres.com.au/clinic-locations/ Partnered Health’s Corporate Health & Wellbeing division, including Jobfit and Baseline and clinics they operate, fall within Category C are not affected by this incident. | See Section C. No action is required. |
Section A – Clinics at which we are continuing to investigate the extent to which personal information has been impacted by this incident, but have written to patients to make you aware of the incident and provide details of the additional steps you can take to help protect yourself
If you are a patient of one of the clinics listed in Section A in the table above, or you received a precautionary SMS or email from us informing you that your personal information may have been affected – please read the steps below.
While we are still investigating the data and do not currently know if your personal information has been impacted, as a precaution you can take the following steps to help protect your information:
- be alert to any suspicious emails, text messages or phone calls, including communications that are disguised to look like they come from someone you know or trust;
- verify the identity of the sender before responding, including checking email addresses and phone numbers rather than relying on the name displayed;
- do not click on links or open attachments in messages that look unusual or unexpected;
- ensure you use strong unique passwords for all accounts and enable multi-factor authentication where available;
- never provide personal, financial or account information in response to an unsolicited request, regardless of how legitimate it appears;
- if you’re unsure whether a link or offer is genuine, go directly to the organisation’s website or contact them using details you already have, rather than the details provided in the message;
- monitor your accounts for unusual activity and contact your bank if you notice anything suspicious; and
- visit www.scamwatch.gov.au for further information on current scam trends.
If we determine that your information has been affected, we will contact you directly.
Section B – Clinics at which this incident may have affected personal information which forms part of your healthcare record with us, including personal information you have provided to us, or which was collected by us while providing you with care.
If you are a patient of one of the clinics listed in Section B in the table above, or you received an SMS or email from us we recommend that you take the steps listed above in Section A.
For specific types of personal information that may form part of your patient record, we provide further recommendations below. Please note that these are only relevant if you have provided these types of personal information to us, of if this information was collected by us while providing you with healthcare services.
| Type of personal information | Recommendation |
| Medicare number or concession card number | As a medical practice, we may hold a copy of your current Medicare card number and relevant concession card number. Services Australia has advised that your accounts cannot be accessed with your card numbers alone. Further, unlike a scanned copy of a Medicare or concession card, a Medicare or concession card number by itself cannot be used as proof of identity or used with the government’s Document Verification Service. We have reported the incident to Services Australia so that additional monitoring can be put in place on all active Medicare cards that may have been impacted. If you’re still concerned, there are more things you can do. For more information, visit www.servicesaustralia.gov.au/databreach. |
| Medical information | Medical information may be used to make a scam contact seem more convincing, so please remain alert to unexpected contact referencing your medical information. |
| Veteran Card (DVA) number | We understand that a DVA file number alone cannot be used to access your personal information or be used as a proof of identity. If you would like further information, we recommend contacting the DVA on 1800 VETERAN (1800 838 372) between 8am and 5pm AEST, Monday to Friday. |
| Private health insurance | For most patients, we do not collect private health insurance information. If you believe your private health insurance details are held by the clinic you visit, there may be a risk that this information can be misused on its own. Please contact your private health insurance provider for guidance about how to place additional security on your account, such as multifactor authentication. |
We understand it can be distressing to learn that your health information may have been affected in a cyber incident. If you have questions about your own health information, we encourage you to speak with your GP in the first instance or email our dedicated support inbox at support@partneredhealth.com.au. A member of our team will respond as soon as possible.
Section C – Clinics that are not impacted.
You are not affected. You may wish to refer to Section A for recommendations to protect your information online.
Further questions
Our dedicated support line has now closed. If you are a patient with further questions, please email support@partneredhealth.com.au and a member of our team will respond as soon as possible.
Former employees with questions about their employment information should email hrsupport@partneredhealth.com.au.
We understand the importance people place on the security of their personal information, so it is something we take very seriously. We sincerely apologise for any concern and inconvenience this has caused you, and we will do everything we can to support our patients as we work through this incident.