Back Teiss Australian healthcare provider suffers ransomware attack, patient records stolen
Epichealth Medical Clinic said a data security incident it suffered earlier this year compromised the sensitive personal and medical information of its patients.
Based in Victoria, Australia, Epichealth Medical Clinic is a privately owned healthcare provider operating a network of four mixed-billing general practice clinics. Its facilities include the Warrnambool Medicare Urgent Care Clinic, Epichealth Ocean Grove Marketplace, Epichealth Ocean Plaza, and Epichealth Portarlington.
In a data security incident notice on its website, Epichealth said it recently detected unauthorised activity on its internal network, disrupting some of its IT systems. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.
It also took steps to secure the affected network and notified relevant law enforcement authorities the incident.
The investigation determined that the threat actor who breached its internal network accessed and exfiltrated confidential data including names, dates of birth, email addresses, phone numbers, addresses, Medicare card numbers, centrelink customer reference numbers, veteran card numbers and health information.
The healthcare provider confirmed that its clinics remain operational and has advised all affected individuals to remain vigilant, not respond to suspicious messages requesting credentials, money, or sensitive information and avoid opening attachments or clicking links in emails from unknown or untrusted sources.
Epichealth has notified the Australian Cyber Security Centre and the Office of the Australian Information Commissioner of the incident and is working closely with both authorities to investigate the matter.
On October 31, the Gentlemen ransomware group claimed responsibility for the cyber attack on Epichealth and listed it as a victim on its data leak site. The group claimed to have obtained confidential data from the healthcare provider and threatened to release it publicly unless its ransom demands were met.
Please take 30 seconds to register
Already have an account? Sign in
10-month cyber attack exposes personal data of South Korean diplomats
$12M Vanishes in Crypto Heist Targeting Cork Protocol’s Depeg Market
149 Million Login Credentials Exposed in Massive Unsecured Database
15-year-old hacker arrested over massive French government data leak
$600 million stolen & returned in biggest ever crypto heist
10-month cyber attack exposes personal data of South Korean diplomats
$12M Vanishes in Crypto Heist Targeting Cork Protocol’s Depeg Market
149 Million Login Credentials Exposed in Massive Unsecured Database
15-year-old hacker arrested over massive French government data leak
183 million business contacts stolen from DemandScience listed for sale by hacker
18 oil and gas companies pledge to cooperate against cyber attacks
2,650% surge in email attacks against ICO in 2021, data reveals
$600 million stolen & returned in biggest ever crypto heist
Securing the Hybrid Cloud Security in the AI era
Closing the AI control gap - architecting security across users, applications, and agents
Bridging the gap between NCSC CAF compliance and continuous device availability
Winston House, 3rd Floor, Units 306-309, 2-4 Dollis park, London, N3 1HF
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
