Skip to content
Epichealth Medical Clinics Hit by Ransomware Attack, Patient Data Compromised

Epichealth Medical Clinics Hit by Ransomware Attack, Patient Data Compromised

First seen 9 Nov 2026, 11:12 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 9, 2026 at 11:13 UTC
  • •Epichealth Medical Clinic suffered a ransomware attack by the Gentlemen group.
  • •Sensitive patient data, including Medicare numbers and personal details, was compromised.
  • •The clinic remains operational while investigations and security enhancements are underway.

Epichealth Medical Clinic in Victoria, Australia, reported a ransomware attack that compromised sensitive patient data. The attack was attributed to the Gentlemen ransomware group, which claimed responsibility on October 31, 2026. The breach involved unauthorized access to the clinic's IT systems, leading to the exfiltration of personal information, including names, dates of birth, email addresses, phone numbers, and Medicare numbers. Epichealth has engaged cybersecurity experts to investigate the incident and has notified relevant authorities, including the Australian Cyber Security Centre. Despite the breach, the clinics remain operational, and the organization has advised affected individuals to remain vigilant against potential phishing attempts. The investigation is ongoing, and the extent of the data compromised is still being determined.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-10-31
Gentlemen ransomware group claims responsibility
The Gentlemen group listed Epichealth as a victim on their data leak site, threatening to publish stolen data.
Teiss
2026-11-09
Epichealth confirms cyber incident
Epichealth reported unauthorized access to its IT systems and is investigating the extent of the data breach.
Cyber Daily
2026-11-09
Public announcement by Epichealth
Epichealth issued a statement detailing the incident and the types of personal information potentially affected.
Epichealth

More articles in this cluster (3)

Following this threat?

Track Gentlemen and Epichealth in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What types of data were compromised?
The breach may have exposed names, dates of birth, email addresses, phone numbers, Medicare numbers, and health information.
Is the clinic still operational?
Yes, all Epichealth clinics remain operational while investigations are ongoing.
What should affected individuals do?
Affected individuals are advised to remain vigilant against phishing attempts and not to respond to suspicious communications.