Ochre Health Tuggeranong Square patient details exposed through two HotDoc accounts
Two Ochre Tuggeranong Square HotDoc accounts were accessed without permission. Patient contact and booking details were affected. Access was stopped; watch for scams and follow any individual notification from Ochre.
If you booked or attended this clinic, watch for suspicious calls, texts and emails, and verify unexpected requests through its usual contact channels. Follow any separate notification from Ochre about additional information, or ask [email protected]. People who never booked or attended this clinic are unaffected.
What’s happening
Ochre Medical Centre Tuggeranong Square in Canberra confirmed unauthorised access to two of its HotDoc accounts. The June report described an attacker claiming more than 25,000 patients and over 700,000 records, including Medicare and DVA numbers and billing details; that scope remains unconfirmed. Ochre stopped the access and said its wider systems and patient care were unaffected. Its 28 August investigation update said almost all affected people had some combination of names, contact details, birth dates, gender and appointment information involved. It found no evidence that clinical records or treatment notes were affected. A small group received separate notifications about additional information, which the public update did not specify. Ochre reported no evidence of misuse. No later public update was found through 3 November; the total number affected and recovery or deletion of copied data remain unconfirmed.
- What
- Breach
- Affects
- Ochre Medical Centre Tuggeranong Square patient information held in HotDoc
- Fixed in
- Nothing to patch
- Since
- 12 June 2026
- Closed
- 28 Aug 2026
Timeline
- Update
Ochre reported that almost all affected people had contact, demographic and limited booking information involved, with no evidence clinical records or treatment notes were affected. It had separately notified a small group about additional information and found no evidence of misuse.
- Update
Ochre's updated statement confirmed unauthorised logins to two HotDoc accounts and said the attacker no longer had access. It said its wider IT environment was unaffected, patient care continued normally, and it was liaising with the OAIC and ACSC.
- Made publicNothing to patch
Cyber Daily reported that an attacker calling themselves 2019 offered purported records of more than 25,000 patients for sale. Ochre confirmed it was investigating access through a third-party platform; the attacker's claimed scale was not independently confirmed.
Sources
- Ochre Medical Centre Tuggeranong Square cyber incidentOchre Health · 28 Aug 2026
- Ochre Health investigation into online data claims — update #4Ochre Health · 18 June 2026
- Exclusive: Ochre Health confirms patient data from its Tuggeranong clinic potentially compromisedCyber Daily · 12 June 2026
- Australian data breach trackerIronSights