Surprisingly Useful AI Article Enhancements
Australian healthcare provider Partnered Health has confirmed that a malicious actor accessed its systems and stole personal information, including health records, from clinics across its national network.
The company became aware of the intrusion on 23 June 2026, with patients notified more than three weeks later. Twenty-one general practices across NSW, Victoria, Queensland, Western Australia and the ACT have been caught up in the breach.
The incident comes at a sensitive time for the company. Partnered Health, owned by private equity group Quadrant since 2000, is in the process of being acquired by UK healthcare giant Bupa in a $450 million deal. Bupa announced the acquisition on 18 June, just five days before the cyberattack occurred. The deal still requires approvals from the competition regulator and the Foreign Investment Review Board.
What Was Taken
Partnered Health’s investigation has confirmed that personal information, including health information, was taken from some of the clinics in its network.
The stolen data may include names, dates of birth, addresses and contact details, along with Medicare numbers and, where applicable, private health insurance, Veteran Card or concession card numbers.
The breach also extends to medical information and treatment details, including consultation notes, referral letters and pathology or diagnostic results recorded by GPs and other medical professionals at the affected clinics.
“We are continuing to investigate the extent to which personal information has been impacted by this incident and are communicating with patients from impacted clinics,” the company stated.
“As a health services provider, we know our patients and our people trust us with personal and medical information and we sincerely apologise for any concern and inconvenience this may cause them.”
Some Clinics Still Under Investigation
At five clinics – three in Western Australia and two in Victoria – the extent of the data theft has not yet been established, and Partnered Health is continuing to investigate what may have been extracted.
“While there is no direct evidence that patient records have been viewed, as a precaution we have written to patients from these clinics to make them aware of this and provide details of steps that can be taken to protect their information,” a Partnered Health spokesperson advised patients.
“We understand that this sort of news can cause concern. We sincerely apologise for any distress this may have caused our patients.”
Regulators Notified, Injunction Obtained
Partnered Health has reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and law enforcement, and is continuing to work with authorities.
The company has also obtained an interim injunction from the Supreme Court of New South Wales ordering that the accessed data is not used or published – a legal tactic increasingly deployed by Australian organisations following data breaches to deter publication of stolen material.
A dedicated support page has been established at www.partneredhealth.com.au/support, where the company says it will provide updates as the investigation continues.
Which Partnered Health Clinics Have Been Breached?
- Blackburn Road Medical Centre
- Broadway General Practice
- Bundall Medical Centre
- Cardiff Medical Centre & Skin Cancer Clinic
- Castle Hill Family Doctors
- Champion Drive Medical Centre
- Chancellor Park Family Medical Practice
- Dromana Family Doctors
- Dural Medical Centre
- Joondalup City Medical Group
- Kealba Family Practice
- Mornington Family Doctors
- Noosaville Seven Day Medical Centre
- North Canberra Family Practice
- Park Beach Family Practice
- Park Orchards Family Practice
- Rockingham City Family Practice
- Sans Souci Medical Practice
- Templestowe District Medical Centre
- Wentworth Avenue Family Practice
- Wyong Family Practice
Advice For Patients
Partnered Health has warned patients to be alert to suspicious emails, text messages and phone calls, including communications disguised to look like they come from a known or trusted source.
Related: Best Business Laptops for work & school
Related: Best Gaming Laptops
Related: Best Portable Laptop
The company advises patients to verify the identity of senders before responding, checking email addresses and phone numbers rather than relying on the displayed name, and to avoid clicking on links or opening attachments in unusual or unexpected messages.
Patients are also urged to use strong unique passwords, enable multi-factor authentication where available, never provide personal, financial or account information in response to unsolicited requests, and monitor their accounts for unusual activity.
The company directed patients to www.scamwatch.gov.au for information on current scam trends.
About Partnered Health
Established in 2013, Partnered Health operates 60 clinics across Australia, spanning general practice as well as skin cancer, allied health and mental health services. The group also owns brands including Jobfit, Baseline Onsite, New View Psychology and NewPsych Psychologists.
The breach adds Partnered Health to a growing list of Australian healthcare organisations targeted by cybercriminals, with the sector remaining an attractive target due to the sensitivity and value of the medical data it holds.
Last Updated on July 15, 2026 by Nick Ross
