NSW Police are investigating a breach of the website for NSW Health’s Oral Health Fee For Service Scheme. Cyber Security NSW has declared it a major incident.
NSW Health reported the unauthorised access on 29 October. The State Crime Command’s Cybercrime Squad is leading the investigation under Strike Force Civic.
What was taken
Police believe about 4GB of data was stolen. It is mainly personal identification details of third-party providers, most of them dentists who deliver care under the scheme.
Officials said:
- the breach was limited to one isolated server, which was taken down after automatic alerts
- no patient data was compromised and no clinical services are at risk
- no other NSW government agencies were affected.
Who is behind it
Police said the suspects appear to be outside Australia. No demand had been received, but someone has claimed responsibility online. Commonwealth agencies, the FBI and the US Department of Homeland Security are assisting.
Health Minister Ryan Park said he learned of the breach only days before it was made public, because police wanted to control the timing of the announcement.
