A cyberattack hit Australian healthcare provider St Vincent’s Health Australia

St Vincent’s Health Australia, the largest Australian healthcare provider, suffered a data breach after a cyber attack.

St Vincent’s Health Australia is the largest non-profit healthcare provider in the country, The healthcare system was hit by a cyberattack that resulted in a data breach.

St Vincent’s Health Australia reported the incident to local authorities and is working with the Australian government to mitigate the security incident.

The healthcare provider hired external security experts to investigate into the intrusion and determine the extent of the attack.

“On Tuesday, 19 December 2023, St Vincent’s Health Australia began responding to a cyber security incident. Late on Thursday, 21 December, St Vincent’s found evidence that cyber criminals had removed some data from our network.” reads the statement published by the organization. “St Vincent’s is working to determine what data has been removed.  The investigation into this matter is ongoing.”  

The statement did not provide details about the attack and did not attribute the incident to a ransomware attack.

The organization pointed out that this incident has not affected the ability of St Vincent’s to deliver services to its patients to date.  

“At this time, our ability to deliver the frontline services that our patients, residents, governments and the broader community rely on us for, has not been impacted.” continues the statement.

At this time, no threat actors have claimed responsibility for the security breach.

In the last couple of years, multiple prominent Australian organizations have been victims of cyberattacks, including Medibank, Energy One, Crown Resorts, Latitude Financial, Nissan Australia, DP World Australia, EnergyAustralia, and Optus.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, healthcare)