NSW Police Cybercrime Squad investigates an alleged data breach at NSW Health after an isolated server was targeted; Cyber Security NSW says it was declared a major incident and no patient data has been impacted at this time
NSW Police's Cybercrime Squad is investigating an alleged data breach at NSW Health after police were alerted at about 1 pm on Friday 30 October 2026, iTnews reported on 4 November. "Cybercrime Squad detectives are investigating an alleged data breach at NSW Health," a police spokesperson said in a statement, as quoted by iTnews, adding that detectives have started an investigation under Strike Force Civic and are working closely with NSW Health and Cyber Security NSW.
A Cyber Security NSW spokesperson told iTnews the breach impacted "an isolated server" and was declared a "major incident", and said: "No patient data has been impacted at this time nor is any patient data currently at risk from this limited cyber breach."
Cyber Security NSW said no further comment was available because it is a criminal investigation. iTnews describes the attacker as unknown. (source: iTnews)
- Product
- NSW Health (NSW public health system): an isolated server
- Versions
- n/a — organisation security incident
- Exploited in Australia?
- unknown
- Patch to
- NSW Health patients and staff: no action has been advised; Cyber Security NSW says no patient data has been impacted at this time. Be wary of unexpected messages that mention this incident and check any request for personal details through official NSW Health contacts.