Data breach reported at SA private hospital

St Andrew's private hospital in Adelaide has reported a data breach involving personal information of a group of individuals. The hospital has informed the individuals affected and authorities responsible for federal privacy and cyber security. Adelaide's Premier, Peter Malinauskas, anticipates being briefed on the incident later on Thursday.

St Andrew's Hospital confirmed the breach in a statement released on Thursday morning, disclosing that an investigation into the nature and extent of the incident has progressed to the point where they can communicate directly with the affected individuals. The hospital's CEO, Angela McCabe, stated that affected individuals were provided information and support on how they can protect their personal data.

The Office of the Australian Information Commissioner (OAIC) and the Australian Cyber Security Centre have been notified about the breach. McCabe mentioned that the hospital is working with government agencies to implement additional protective measures, aiming to detect and prevent suspicious and fraudulent activities.

Under Australia's Privacy Act, entities covered by the Notifiable Data Breach scheme are required to report breaches to the OAIC if they are likely to result in serious harm to affected individuals. Serious harm can include the exposure of health information, documents used for identity fraud, and financial data.

South Australian Premier Peter Malinauskas expressed the state government's expectation to receive a briefing on the incident later on the same day. He emphasized the importance of determining whether the breach involved any criminal activity subject to the South Australian criminal code, as this would be of significant interest to the government.

McCabe highlighted the global challenges and threats in the cyber security landscape, stressing the importance for law enforcement agencies to assess the situation thoroughly.