Epichealth, operator of four Victorian clinics including the Warrnambool Medicare Urgent Care Clinic, says an unauthorised party accessed its IT systems; Medicare, Centrelink CRN, DVA numbers and health information may be affected (4 Nov)
Epichealth said in a notice dated 4 November 2026 that it recently experienced a cyber incident in which an unauthorised third party accessed a part of its IT systems. Epichealth operates four medical clinics: the Warrnambool Medicare Urgent Care Clinic, Epichealth Ocean Grove Marketplace, Epichealth Ocean Plaza and Epichealth Portarlington.
It said independent cyber experts contained the incident and restored access to its systems with limited impact to operations, and that its clinics remain open.
According to the notice, the personal information that may be affected includes name, date of birth, email address, phone number and/or address; Medicare card number; Centrelink customer reference number (CRN); Veteran card (DVA) number; and health information.
Epichealth said it has reported the incident to the Australian Cyber Security Centre and the Office of the Australian Information Commissioner. (source: Epichealth)
An Epichealth spokesman confirmed the incident to Cyber Daily (5 November 2026). (source: Cyber Daily)
Correction (12 Nov 2026): this card repeated a ransomware group's leak-site listing of Epichealth; that claim came only from the group and has been removed. (source: Cyber Daily, which attributes the listing to the group)
- Product
- Epichealth Medical Clinic IT systems (Warrnambool, Ocean Grove Marketplace, Ocean Plaza, Portarlington, Victoria)
- Versions
- n/a — incident
- Exploited in Australia?
- unknown
- Patch to
- Epichealth patients: follow the notice — watch for scam emails, SMS and calls that use your details, check bank statements, and see servicesaustralia.gov.au/databreach for Medicare and Centrelink numbers. Questions: contact Epichealth as listed in its notice.