Key facts
- Partnered Health, owned by Quadrant, experienced a cyber-attack on June 23.
- The breach impacted 21 clinics across Sydney, Melbourne, and Canberra.
- Stolen data includes personal information like names, addresses, and contact details.
- Sensitive medical information, including consultation notes and diagnostic results, was also compromised.
- Partnered Health has reported the incident to the Australian Cyber Security Centre and other authorities.
- The company is seeking a court injunction to prevent the misuse of the stolen data.
Partnered Health, a large Australian healthcare provider owned by private equity firm Quadrant, has suffered a significant cyber-attack that compromised patient records. The breach, which occurred on June 23, affected 21 clinics across cities including Sydney, Melbourne, and Canberra. The company confirmed that personal and health information was accessed by a "malicious actor."
The compromised data includes names, dates of birth, addresses, contact details, and sensitive medical information such as consultation notes and diagnostic results. Details of Medicare, private health insurance, and concession cards were also reportedly stolen.
Partnered Health has notified relevant authorities, including the Australian Cyber Security Centre and the Office of the Australian Information Commissioner, as well as law enforcement. The company has also sought an interim injunction from the Supreme Court of New South Wales to prevent the use or publication of the stolen data.
This incident follows a trend of increasing data breaches in Australia, with the Office of the Australian Information Commissioner reporting a record high of 1205 notifications in 2025. Partnered Health, which operates over 60 medical centres nationwide and serves more than five million people, is in the process of being acquired by Bupa.