Our takeNSW Police have opened a criminal investigation into a cyber breach on an isolated NSW Health server; officials say no patient data was affected. Treat the scope as unconfirmed until the probe concludes.Security Resilience desk
Sources (2)
- databreaches · databreaches
- acsm_au · acsm_au
What this means for you — Security leader:Review your incident response and logging on isolated or legacy health systems; ensure breach detection timelines meet regulatory thresholds and that patient data segmentation is verified.
What this means for you — Lean IT orgs:If you run any local servers for patient records or clinic systems, confirm they are fully patched, segmented from the internet, and that you have recent offline backups.
What this means for you — MSP:Check every healthcare client for exposed or isolated NSW Health-connected systems; verify segmentation, patch levels, and logging, and prepare coordinated breach-notification playbooks.
What this means for you — Researcher:NSW Health breach now under formal criminal investigation by NSW Police Cybercrime Squad (Strike Force Civic); officials state no patient data affected, but scope and initial access vector remain unconfirmed.