GP clinic network hit by major cyber breach

A network of GP practices and skin cancer clinics has been hit in a major cyber attack, with personal medical records stolen.

Partnered Health, which runs 57 clinics across the country, posted an incident report to its website confirming that patients' medical records were accessed and taken in the cyber breach.

It became aware of the cyber attack on June 23 and has been working with agencies including the Australian Cyber Security Centre and police.

Some affected patients were contacted late this afternoon.

Partnered Health has listed 16 clinics where patient information may have been stolen, including personal details and sensitive medical records like consultation notes, referral letters and pathology results.

It also warns that details like patient's names, contact details, addresses, Medicare and private health insurance details might have been taken.

They include practices in Melbourne, Sydney, Canberra, Gold Coast, Sunshine Coast and Coffs Harbour.

It has listed another five, including some in Western Australia, where it is still investigating whether details have been stolen.

In a statement online, Partnered Health revealed it has engaged cyber experts to continue assessing exactly what has been stolen, but it is clear that some information has been taken.

"Our investigations to date have confirmed that personal information, including health information, was taken from some of the clinics in our network," it said.

"We are continuing to investigate and we are communicating with patients from impacted clinics."

The healthcare provider said it has taken legal steps to try and protect any information taken.

"To help protect our patients and people we have obtained an interim injunction from the Supreme Court of New South Wales ordering that the accessed data is not used or published," it said.

The medical network is warning patients to be wary of scam contacts that may refer to their personal medical records in an effort to appear more convincing.

It has been in contact with Services Australia in an effort to ensure additional monitoring for anyone whose Medicare details might have been stolen.

Government cyber authorities have recently stepped up warnings to businesses and any other agencies holding sensitive personal details to step up their cyber security.

Yesterday the Australian Signals Directorate (ASD) joined with partner agencies around the world to warn of a surge of Russian-linked cyber attacks targeting poorly protected router networks, particularly in critical infrastructure.

And the ASD has previously warned that artificial intelligence will accelerate the frequency and complexity of cyber attacks, urging anyone at risk to step up their cyber security.

Partnered Health recently announced it is being acquired by health insurer Bupa.