Why healthcare leads Australia's data breach notifications

Why healthcare leads Australia's data breach notifications

Health service providers made 149 of the 667 data breach notifications received by Australia's privacy regulator from January to June 2026, more than any other sector.

Not every breach starts inside the practice. In late October, data was taken from a server that runs NSW Health's Oral Health Fee for Service Scheme. NSW Police said the stolen data included personal identification details of providers, mainly dentists.

Information about a practice can also sit with pathology laboratories, practice software providers, booking platforms and IT support companies. Our latest Cyber Brief sets out the questions to ask each key supplier, and the checks that help a practice keep caring for patients if its systems are affected.

Read the Cyber Brief

Read more briefings in the Cyber Brief.

Related news & insights

Firewall and VPN security: why attackers target the devices meant to keep them out

Firewall and VPN security: why attackers target the devices meant to keep them out

Firewalls and VPNs have to be reachable from the internet, and most can't run the security tools that watch laptops and servers. That makes them an attractive way in. ...

Weekly Cyber Brief: fake help desks, exploited VPNs and a hack the business missed

Weekly Cyber Brief: fake help desks, exploited VPNs and a hack the business missed

This week's risks came in through tools staff use every day: chat, remote access and free software. ...

Free download: the Government's cyber threat report, in two pages

Free download: the Government's cyber threat report, in two pages

The Australian Signals Directorate's Annual Cyber Threat Report 2025-26 is 68 pages long. We've pulled out the five facts that matter most to mid-sized organisations, plus ten questions to put...

Get the Cyber Brief

Clear, practical updates on the cyber threats facing Australian businesses, and what to do about them. Sent every Tuesday morning.