{"id":544431,"date":"2026-07-16T13:45:12","date_gmt":"2026-07-16T13:45:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/544431\/"},"modified":"2026-07-16T13:45:12","modified_gmt":"2026-07-16T13:45:12","slug":"australian-patients-medical-records-could-be-sold-on-dark-web-after-clinics-data-breach-health","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/544431\/","title":{"rendered":"Australian patients\u2019 medical records could be sold on dark web after clinics\u2019 data breach | Health"},"content":{"rendered":"<p class=\"dcr-1s160rg\">Australians\u2019 medical records and patient information could be sold on the hidden market, an expert has warned, after a cyber-attack at one of the nation\u2019s biggest healthcare providers.<\/p>\n<p class=\"dcr-1s160rg\">Partnered Health <a href=\"https:\/\/www.theguardian.com\/australia-news\/2026\/jul\/15\/patient-records-stolen-in-cyber-attack-on-australian-healthcare-provider\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">revealed 21 clinics across several cities<\/a> including Sydney, Melbourne and Canberra were affected when a \u201cmalicious actor\u201d accessed its data on 23 June.<\/p>\n<p class=\"dcr-1s160rg\">Medical information including treatment details, consultation notes, referral letters and pathology or diagnostic results is believed to have been stolen, alongside Medicare numbers, private health insurance details, names, dates of birth, addresses and more.<\/p>\n<p class=\"dcr-1s160rg\">Patients and stakeholders affected by the breach have been contacted, but a Partnered <a href=\"https:\/\/www.theguardian.com\/australia-news\/health\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\" rel=\"nofollow noopener\" target=\"_blank\">Health<\/a> spokesperson told Guardian Australia it was not in its patients\u2019 interests to publicly discuss the number of people affected.<\/p>\n<p class=\"dcr-1s160rg\">The company said it had obtained an interim injunction from the New South Wales supreme court ordering the accessed data not be used or published.<\/p>\n<p class=\"dcr-1s160rg\">While this could prevent the dataset from being released on a regular website, it was unlikely to stop it from being sold on the hidden market and dark web, the University of Melbourne information systems senior lecturer Dr Suelette Dreyfus said.<\/p>\n<p class=\"dcr-1s160rg\">Personal medical information is particularly valuable, according to Dreyfus, <a href=\"https:\/\/www.ibm.com\/think\/x-force\/healthcare-data-breaches-costliest\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">with reports of it selling<\/a> for up to US$250 per record, compared with personal information like name and address which sell for a few cents each.<\/p>\n<p class=\"dcr-1s160rg\">\u201cYou can match it with information in other datasets, and this means the profile you\u2019re able to build of someone is much more detailed and potentially much more dangerous to privacy,\u201d she said.<\/p>\n<p><a data-link-name=\"standard link button Primary\" data-spacefinder-role=\"inline\" data-ignore=\"global-link-styling\" href=\"https:\/\/www.theguardian.com\/email-newsletters?CMP=copyembed&amp;CMP=emailbutton\" class=\"dcr-rh233e\" rel=\"nofollow noopener\" target=\"_blank\">Sign up for the Breaking News Australia email <\/a><\/p>\n<p class=\"dcr-1s160rg\">\u201cIt could really disrupt a person\u2019s life if they had a medical condition like a long-term disease \u2013 the risk is pretty substantial.\u201d<\/p>\n<p class=\"dcr-1s160rg\">It is also possible someone may have placed an order with the attackers to target a specific company or person, she said.<\/p>\n<p class=\"dcr-1s160rg\">In 2018, the <a href=\"https:\/\/www.abc.net.au\/news\/2018-07-20\/singapore-health-database-hack-steals-details-of-1.5m-people\/10019492\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">details of 1.5 million Singaporean patients were stolen<\/a>, with unidentified state actors specifically targeting the country\u2019s prime minister, Lee Hsien Loong.<\/p>\n<p class=\"dcr-1s160rg\">Unlike financial data breaches, where victims can mitigate potential damage by changing passwords and credit cards, those who lose their medical records have less recourse.<\/p>\n<p class=\"dcr-1s160rg\">\u201cIt\u2019s pretty hard to change your medical history once it\u2019s bolted out the door due to a cyber-attack,\u201d Dreyfus said.<\/p>\n<p class=\"dcr-1s160rg\">She urged Australians to stay vigilant about any unusual activity in their accounts, ensure their devices have the latest security updates, and change their passwords regularly.<\/p>\n<p><a data-ignore=\"global-link-styling\" href=\"#EmailSignup-skip-link-16\" class=\"dcr-76akua\">skip past newsletter promotion<\/a>Free newsletter | When needed<\/p>\n<p class=\"dcr-vf9hps\">Sign up to Breaking News Australia<\/p>\n<p class=\"dcr-1r7my33\">Get the most important news as it breaks<\/p>\n<p><img src=\"https:\/\/www.newsbeep.com\/il\/wp-content\/uploads\/2026\/07\/2998.jpg\" alt=\"\" loading=\"lazy\" decoding=\"async\" class=\"dcr-xiq31o\"\/><\/p>\n<p id=\"EmailSignup-skip-link-16\" tabindex=\"0\" aria-label=\"after newsletter promotion\" role=\"note\" class=\"dcr-76akua\">after newsletter promotion<\/p>\n<p class=\"dcr-1s160rg\">Governments and institutions should also increase practical cybersecurity training, build more public awareness and support research to prevent attacks, she said.<\/p>\n<p class=\"dcr-1s160rg\">This is not the first time Australians have had their data put at risk in a cyber-incident.<\/p>\n<p class=\"dcr-1s160rg\">In 2022, the personal details of 9.7 million current and former Medibank customers <a href=\"https:\/\/www.theguardian.com\/technology\/2022\/oct\/21\/medibank-hack-explained-what-do-we-know-about-the-data-breach-and-who-is-at-risk\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">were published on the dark web<\/a> after the company refused to pay a hacker group.<\/p>\n<p class=\"dcr-1s160rg\">Three years earlier, the Victorian auditor general <a href=\"https:\/\/www.theguardian.com\/australia-news\/2019\/may\/29\/victorias-patient-data-vulnerable-to-cyber-attacks-says-audit\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">exposed cybersecurity weaknesses<\/a> by using \u201cbasic hacking tools\u201d to access sensitive patient data at three hospitals.<\/p>\n<p class=\"dcr-1s160rg\">It made recommendations to the department of health and hospitals, which were accepted.<\/p>\n<p class=\"dcr-1s160rg\">Though doctors and nurses would be sensitive to the importance of patient privacy, medical institutions do not always prioritise the cybersecurity element of the services they provide, Dreyfus said.<\/p>\n<p class=\"dcr-1s160rg\">\u201cThey\u2019re thinking about it in terms of not giving someone\u2019s ex-husband this information about his ex-wife,\u201d Dreyfus said.<\/p>\n<p class=\"dcr-1s160rg\">\u201cBut that\u2019s obviously a different thing than an attacker who goes in for a wholesale swipe of the hospital\u2019s information.\u201d<\/p>\n<p class=\"dcr-1s160rg\">The incident has also been reported to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and law enforcement.<\/p>\n","protected":false},"excerpt":{"rendered":"Australians\u2019 medical records and patient information could be sold on the hidden market, an expert has warned, after&hellip;\n","protected":false},"author":2,"featured_media":544432,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[163,521,85,46],"class_list":["post-544431","post","type-post","status-publish","format-standard","has-post-thumbnail","category-healthcare","tag-health","tag-healthcare","tag-il","tag-israel"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/544431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=544431"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/544431\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/544432"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=544431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=544431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=544431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}