93← Home

Major breach targets dental data

Headline from News.com.au · compiled from 3 sources

Our analysis · checked against 4 sources

Dentists' data taken from NSW Health dental voucher site; officials say no patient data

On October 29 NSW Health found unauthorised access to one website, its Oral Health Fee For Service voucher scheme, exposing personal information on participating dentists; eHealth says no patient data was involved. Police estimate about 4GB was taken, while an unverified hacker post claims 70GB; investigators declared it a "major incident" and police are investigating overseas suspects.

The framing"Major breach" does match investigators' formal declaration of a "major incident". But police estimate about 4GB was taken and eHealth says only a small number of dental providers' records, not patients', were involved, against about 9.7 million customers in Medibank's 2022 breach.

What the headline leaves out

  • eHealth says no patient data was involved; the data concerns a small number of private dentists in the scheme.
  • Compared with Medibank's 2022 breach of about 9.7 million customers' health claims data, this is far smaller.
  • The 70GB / 100,000-document figure is an unverified hacker claim; Hackmanac's verification is "pending".
  • Automatic alerts flagged it; the site was taken down within about three hours.

What happens next

Police are investigating suspects outside Australia with US agency contact, and eHealth is working to notify affected dental providers; no further dates have been announced. Superintendent Matt Craft said police still need to "test the veracity" of the hacker's online claims. eHealth's Richard Taggart said stolen data could include sensitive documents. Watch for whether the 70GB claim is verified and which privacy regulator takes the case.

Possible knock-on effects
  • If the hacker's larger claim is verified, the number of providers to be notified could grow, and affected dentists may need to protect identity documents against misuse. (mechanism: Follows from eHealth notifying providers whose personal identification information may have been taken; no source forecasts this.. Watch for: Hackmanac or police confirming or rejecting the 70GB claim, and any change in the count of notified providers.)

Sources: ABC News: NSW Police investigate cyber breach at NSW Health, Epoch Times/AAP: NSW Health server hacked, dental scheme data stolen, Medibank class action, OAIC: Australian Clinical Labs ordered to pay penalties (primary)

Written in our own words from the sources above, and checked claim by claim before it was published. The report below says only what each outlet said.

The report: what outlets said

According to ABC News, NSW Police are investigating a cybersecurity breach at NSW Health that officials have "declared a major incident"[1]

ABC News reports that on October 29, NSW Health reported the discovery of an unauthorised access to a single NSW Health website[1]. The broadcaster says that website runs the Oral Health Fee For Service Scheme, a voucher scheme for eligible patients to receive subsidised dental treatment from a third party provider[1].According to ABC News, Detective Superintendent Matt Craft said the breach involved a "significant amount of personal identification information" related to the third party health providers, namely dentists[1]. ABC News also reports that police believe the amount of data stolen was about 4GB[1].The Epoch Times reports that eHealth chief executive Richard Taggart said no patient data was involved in the breach, but a small number of third-party provider data may have been stolen[2]. According to the Port Macquarie News, NSW Health uncovered the breach after an automatic system identified unusual traffic on a remote health server. The site was taken down manually within about three hours.[3]ABC News quotes Superintendent Craft as saying "it's obvious to us at this stage that it's people that are outside Australia"[1]. The broadcaster says police were in touch with the FBI and the Department of Homeland Security[1].According to ABC News, Craft said police were yet to receive any demands or threats related to the data, but there had been a claim posted online from somebody purporting to be responsible[1]. ABC News also reports that Health Minister Ryan Park said he learned of the breach in "the last couple of days"[1].

Listen to the songIT Security News — November 04, 2026

Sources

  1. [1]Police investigate cybersecurity breach of NSW Health's Oral Health Fee For Service Scheme website - ABC News
  2. [2]NSW Health Server Hacked, Dental Scheme Data Stolen | The Epoch Times
  3. [3]Overseas hackers suspected in state health data breach | Port Macquarie News | Port Macquarie, NSW

Every sentence here reports what a named outlet said, with a link to it. Compiled by 93 from the reporting below.

This topic, day by day

Major breach targets dental data | 93