Confirmed

IntraCare confirms unauthorised access and exfiltration of patient information

Following the March 20 cyber incident, investigation confirmed exfiltration of patient personal information. The exact first-publication day, count and complete data-field scope are unknown and are not invented.

Last updated: 2026-11-09

Overview

Retained updates begin March 26. The provider reported confirmed access April 9 and exfiltration/publication April 22; no stolen data was accessed. Closure of the Privacy Commissioner notification on May 13 does not deny the breach. An October 29 update describes a permanent injunction. Unpublished diagnostic or other fields are not inferred.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed
  4. Cyber incident occurred and was detected.

  5. Early retained update; not assumed to be the first public day.

  6. Provider reported confirmed exfiltration and publication.

  7. Update regarding permanent injunction.

Organization response

The provider suspended/restored systems, engaged specialists and authorities, notified affected people, obtained court injunctions and offered support.

What you can do

Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.

Sources

  1. Information regarding cyber incident: updates through October 29IntraCare · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.