Criminal investigation under way after NSW Health data breach

Police are investigating a ‘major incident’ after a health department in one of Australia’s biggest states was hit with a data breach.

A police investigation is under way after NSW Health declared a “major incident” after it was hit with a cyber breach.

The state’s health department confirmed the data breach on Wednesday, impacting an isolated and remote server.

‘The breach has been declared a major incident and is being investigated by the NSW Police Cyber Crime Squad,” the statement read.

They confirmed no patient data had been accessed during the breach.

“What I can tell people is that at this stage, no patient details or information has been compromised, and there’s no clinical risk or clinical service that has been compromised in terms of any future risks,” Health Minister Ryan Park said.

Mr Park confirmed the criminal investigation was ongoing.

“We will make sure that we keep the community and individuals updated as best we can, but we have to do that knowing that we are going through a police investigation,” he said.

“So that can be challenging.”

Mr Park said NSW Health had “very robust cybersecurity systems in place” but said criminal activity and hacks were challenges all governments must face.

“The reality is for all government agencies and individuals – this is going to be a part of the challenges we face in terms of criminal activity going forward, and we will need to constantly look at what we’re doing in this space,” he said.

“How to strengthen and harden up our systems and controls. That’s what we’re doing all of the time given the nature of sensitive information that we have.

“But criminals are criminals. They evolve in relation to the work that they do. We need to make sure that we’re moving as well.’