NSW Health: cyber breach on isolated server under criminal investigation; patient data reportedly unaffected
Severity: medium · Patch status: no-fix-needed · Since 2026-11-03
A major cyber breach has been declared at NSW Health in Australia. Cyber Security NSW is responding to an incident affecting an isolated server within NSW Health, and a criminal investigation is under way. Officials state that patient data has not been affected, and the full scope of the intrusion and any data accessed has not yet been disclosed. The breach was publicly reported on 2026-11-03; details on the attack vector, threat actor, and remediation timeline remain unknown as investigations continue.
What to do
- Monitor NSW Health and Cyber Security NSW advisories for scope updates
- Review network segmentation and isolation of sensitive health systems
- Verify access controls and credentials for servers connected to NSW Health services
- Ensure incident response and reporting procedures align with Australian health data breach obligations
Sources
All live incidents on Threat Watch
