Login
iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Powered by MOMENTUMMEDIA
A Victorian medical centre has disclosed that it was a victim of a cyber attack, leading to personal information being accessed.
Point Lonsdale Medical Group (PLMG) said that the firm’s email account is believed to have suffered unauthorised access after phishing emails were identified as being sent from that email.
“PLMG undertook immediate containment and remediation actions and also notified the recipients of the phishing emails, advising them not to interact with that email,” the medical centre said.
The company said that its own systems and patient database had not been breached, but that, based on the investigation of external forensics experts, a small number of emails contained in the mailbox were accessed.
“We have been working with our external forensic experts to identify which emails have been accessed. Unfortunately, we have not been able to identify the particular emails that were accessed,” the medical centre added.
“We take the privacy of our patients incredibly seriously. As a result and out of abundant caution, we are informing all our patients of potential access to their personal information, to the extent their personal information may have been in that particular email account, and the protective measures they can take to safeguard their information.”
The data accessed was information the firm typically sends or receives via email, including health summaries, treatment plans and referrals, within which contained data such as “name, date of birth, address, medical history, diagnosis and treatment plans”.
The firm added that it is currently unsure which emails were accessed, but said it was a small number. It also said that there is currently no evidence to suggest the data was exfiltrated.
At this stage, the threat actor behind the PLMC incident has not been publicly identified, nor has Cyber Daily seen any groups claiming responsibility for the incident.
Be the first to hear the latest developments in the cyber industry.
