Patients from health clinics in Rockingham, Joondalup and Armadale may have had their data, including consultation notes, compromised as part of a cyber attack on Partnered Health.
In a statement, Partnered Health confirmed it had been the victim of a cyber attack impacting customer information, including names, date of birth, address, contact details, Medicare card numbers, private health insurance numbers, medical information and treatment details.
The company said investigations were still ongoing, and that it had been reported to the Australian Cyber Security Centre and other relevant authorities.
"Our investigations to date have confirmed that personal information (including health information) was taken from some of the clinics in our network. We are continuing to investigate the extent to which personal information has been impacted by this incident and are communicating with patients from impacted clinics," the statement said.
As a health services provider, we know our patients and our people trust us with personal and medical information, and we sincerely apologise for any concern and inconvenience this may cause them."
In response, Partnered Health has already been granted an injunction from the Supreme Court of New South Wales.
An injunction prevents any stolen data from being accessed, downloaded, shared or published in Australia.
It does little, however, to stop the information being accessed, downloaded, shared or published internationally.
The company has also set up a website to provide updates on their investigations, which divides its centres into three categories: category A, for those it is still investigating, category b, for those confirmed to have had data stolen, and category C, those which are not involved.
The network's three WA clinics, Champion Drive Medical Centre in Armadale, Rockingham City Family Practice and Joondalup City Medical Group, are listed as 'Category A' on the company's cyber response webpage.
