NSW Health Server Hit in Suspected Cyber Attack, Police Open Criminal Investigation

An isolated server operated by NSW Health has been targeted by an unknown attacker, leading to a criminal investigation and the declaration of a "major incident". NSW Police said they were alerted to an alleged data breach at NSW Health at about 1 pm on Friday 30 October.

The NSW Police Cybercrime Squad has begun an investigation under Strike Force Civic. Detectives are working closely with NSW Health and Cyber Security NSW. Cyber Security NSW said the breach affected "an isolated server" and described it as a limited cyber breach.

A Cyber Security NSW spokesperson said no patient data has been impacted at this time, and none is currently at risk. Because the matter is now a criminal investigation, the agency said no further comment is available. A NSW Health spokesperson was contacted for comment but had not responded by the time the original report was published. The source does not say who is behind the attack or how the server was accessed, and the situation may develop as the investigation continues.