{"id":49091,"date":"2026-03-10T16:00:33","date_gmt":"2026-03-10T10:30:33","guid":{"rendered":"https:\/\/arcon.xyz\/?post_type=risk-to-watch&p=49091"},"modified":"2026-03-18T17:49:52","modified_gmt":"2026-03-18T12:19:52","slug":"data-breach-one-of-the-largest-patient-portals","status":"publish","type":"risk-to-watch","link":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/data-breach-one-of-the-largest-patient-portals\/","title":{"rendered":"Data Breach:\u00a0One of\u00a0the Largest\u00a0Patient Portals"},"content":{"rendered":"\n

<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":40,"featured_media":49092,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"risk-categories":[],"class_list":["post-49091","risk-to-watch","type-risk-to-watch","status-publish","has-post-thumbnail","hentry"],"acf":{"blog_inner_page_contents":[{"acf_fc_layout":"hero_section","image":49092,"news_logo":"","publish_date":"","reading_time":"","heading":"","para":"","cta_text":"","cta_url":"","is_featured_post":false},{"acf_fc_layout":"page_contents","social_media_items":null,"sidebar_item_desktop":[{"id":"Overview","item_name":"Overview"},{"id":"What ","item_name":"What Happened? "},{"id":"Scope","item_name":"Scope & Impact "},{"id":"Key","item_name":"Key Risks Highlighted "},{"id":"Actionable","item_name":"Key Actionable Takeaways for Security Leaders "},{"id":"Why","item_name":"Why This Matters: The Bottom-line "}],"contents":[{"id":"Overview","title":"Overview","content":"A significant cybersecurity incident involving one of\u00a0Oceania\u2019s largest patient portals \u2014 has highlighted critical risks to sensitive healthcare data and underscores ongoing threats in the healthcare cybersecurity landscape. This\u00a0massive\u00a0breach reinforces the urgency for organizations handling health information to strengthen cyber\u00a0defenses, improve incident response, and\u00a0emphasize\u00a0patient trust."},{"id":"What ","title":"What Happened? ","content":"At the end of 2025,\u00a0the portal\u00a0detected a cybersecurity breach involving\u00a0unauthorized\u00a0access to its systems that host patient health information. The incident was publicly\u00a0disclosed\u00a0on 31 December 2025, with details\u00a0indicating\u00a0that a threat actor \u2014 self-identifying as\u00a0\u201cKazu\u201d<\/em>\u00a0\u2014 had accessed a module\u00a0containing\u00a0medical documents stored within the platform.\r\n\r\nThe breach affected\u00a0roughly 6\u20137% of the portal\u2019s approximately\u00a01.8 million users, translating to around 120,000\u2013126,000 patients whose documents, including referral letters, discharge summaries, test results and patient-uploaded files, may have been exposed."},{"id":"Scope","title":"Scope & Impact ","content":"