Police are investigating a major cybersecurity breach at NSW Health, but officials have reassured the public that patient data has not been compromised.
On October 29, NSW Health reported the discovery of an unauthorised access to a single NSW Health website, and the State Crime Command’s Cybercrime Squad was subsequently alerted.
The website in question is the Oral Health Fee For Service Scheme, a voucher scheme for eligible patients to receive subsidised dental treatment from a third party provider.
Cyber Security NSW, which leads the state government’s response to significant cyber incidents and cyber crises, said the breach had affected an isolated server.
“The breach has been declared a major incident,” a spokesperson said.
The website in question is NSW’s Health Oral Health Fee For Service Scheme website. (ABC News)
NSW Chief Cyber Security Officer Marie Patane said the ‘major’ categorisation of the incident was determined given it breached relevant triggers in their emergency cyber sub plan.
“There is no impact to patient information, no [patient] data has been compromised and no clinical services are at risk,”
she said.
Ms Patane said there was no impact to other NSW government agencies.
Marie Patane says no other government agencies have been impacted by the breach. (ABC News)
In a statement, NSW Police said cybercrime squad detectives were leading the investigation under Strike Force Civic and were working closely with NSW Health and Cyber Security NSW.
What data was accessed in the breach?
Richard Taggart is the chief executive of eHealth NSW, which implements information and communications technology for the state’s health system.
He said a “small number of details for third party health providers” was the data impacted by the breach on the Oral Health Fee For Service Scheme website.
NSW Police Cyber Crime Squad Commander Detective Superintendent Matt Craft said the breach involved a “significant amount of personal identification information” related to the third party health providers, namely dentists.
Police believe the amount of data stolen was about 4GB.
Richard Taggart explained the data accessed in the breach. (ABC News)
Mr Taggart described the information accessed as “potentially” sensitive.
“The alerts that came through from our cybersecurity systems were automatic, but the site was taken down manually,” Mr Taggart said.
Who is behind the data breach?
Superintendent Craft said an active investigation remained underway to find the culprit.
“There is an international element to this investigation … it’s obvious to us at this stage that it’s people that are outside Australia,” he said.
“This is a serious criminal offence where data has been taken … it’s not an AI-related breach it’s an individual who has engaged in unlawful conduct.“
Superintendent Craft says the incident is not related to AI. (ABC News)
Superintendent Craft said Commonwealth cybersecurity agencies like Australian Federal Police were assisting.
He also said police were yet to receive any demands or threats related to the data, but there had been a claim posted online from somebody purporting to be responsible.
Police were in touch with the FBI and the Department of Homeland Security.
“There has been engagement on a number of different platforms and posts that have been made by somebody purporting to be the threat,” Superintendent Craft said.
As well as looking into the unlawful access of data, Superintendent Craft said police would look into any identity crimes.
NSW Police are investigating the incident. (ABC News: Floss Adams)
Why public notice was delayed
Health Minister Ryan Park said he was first made aware of the cyber breach in “the last couple of days”.
“Police made it clear that given it is a live investigation, they wanted to determine when that [news] goes public,” he said.
“I also hasten to say we are in a live investigation, so things can and may and often do in this type of incident change,”
he said.
Ryan Park addressed the media on Wednesday. (ABC News: Justin Huntsdale)
Transport Minister John Graham told 702 ABC Sydney the incident was a “big reminder about the importance of cybersecurity”.
“It is getting more difficult, there’s no question about that,” he said.
Source: www.abc.net.au
