Partnered Health, which operates 57 general practice and skin cancer clinics across Australia, confirmed on Wednesday, July 15th 2026, that it suffered a significant cyber breach resulting in the theft of patients' medical records.

The company became aware of the attack on June 23 and has since been collaborating with the Australian Cyber Security Centre and police. Partnered Health identified 16 clinics where patient information, including personal details and sensitive medical records such as consultation notes, referral letters, and pathology results, may have been stolen. Clinics affected are located in Melbourne, Sydney, Canberra, Gold Coast, Sunshine Coast, and Coffs Harbour, with investigations ongoing at five additional clinics, including some in Western Australia.

The stolen data potentially includes patients' names, contact details, addresses, Medicare information, and private health insurance details. Partnered Health stated, "Our investigations to date have confirmed that personal information, including health information, was taken from some of the clinics in our network."

To prevent misuse or publication of the accessed data, Partnered Health has obtained an interim injunction from the Supreme Court of New South Wales. The injunction orders that the stolen data not be used or published.

The company is continuing its investigation and communicating with patients from the impacted clinics. Partnered Health also recently announced it is being acquired by health insurer Bupa.

Sources