The recent Updoc has highlighted new cybersecurity concerns in Australia’s healthcare sector, as the telemedicine provider confirmed that an unauthorized third party may have gained access to customer contact information through an external system. The data breach, which was disclosed on August 7, stemmed from a brief security incident involving a third-party platform that supports the company’s operations.
See also: Proton Data Breach Observatory: Notifies you when your personal data appears on the Dark Web
Although the Updoc cyberattack did not expose medical or financial records, it is the latest cyber incident to impact Australia's healthcare sector.
Updoc, an Australian telemedicine provider that offers 24-hour healthcare services, detected unauthorized access to a third-party operating system on Friday, July 31. In a statement shared with The Cyber Express, the company said the incident was limited to an external system used to support its operations. The exposure was limited to customer contact information, which may have included account holder names, email addresses, and postal addresses.
Updoc said its internal systems were not accessed during the incident and confirmed that no medical records, financial information or payment details were involved. The company added that it acted promptly to block unauthorized access and found no evidence of further activity after the initial incident. According to the company, customers do not need to take any immediate action, as account connections and security remain unaffected. Updoc also apologized for any concerns or inconvenience caused by the incident.
The cyberattack on Updoc adds to the threats to the healthcare sector. Founded in 2021, Updoc generates around $10 million a year. According to its founders, the platform has served over a million patients since its launch, while its website says it has over 500,000 users. The cyberattack on Updoc follows a series of cybersecurity incidents targeting Australian health and consumer organisations.
In June, clinic network Partnered Health revealed a cyberattack in which hackers stole personal information and medical records from patients at at least 21 clinics across five Australian states.
See also: OnTrac data breach: customer notification after network breach
This breach exposed sensitive information, including medical records, Medicare numbers, consultation notes, referral letters and pathology results. The attack affected clinics in Melbourne, Sydney, Canberra, the Gold Coast, the Sunshine Coast and Coffs Harbour. At the time, five other clinics, including several in Western Australia, remained under investigation.
Although the data breach at Updoc was limited to contact information and did not compromise medical or financial data, the data breach at Updoc highlights the risks associated with third-party service providers.
As healthcare organizations continue to rely on external platforms, the incident highlights how vulnerabilities outside of their own infrastructure can lead to the exposure of customer information.
Relying on third-party service providers is a common occurrence in the healthcare sector as organizations seek to improve efficiency and reduce costs. However, this practice comes with risks, as external platforms may not have the same levels of security as organizations’ internal systems. The Updoc breach is a prime example of how vulnerabilities in third-party services can have serious consequences for data security.
The increasing frequency of cyberattacks in the healthcare sector highlights the need for increased vigilance and investment in cybersecurity. Healthcare organizations must ensure that their third-party service providers adhere to strict security standards and implement regular audits to detect potential vulnerabilities. In addition, training staff to recognize and respond to cyber threats is critical to protecting sensitive information.
See also: European Commission Cloud Breach: 91GB of Data Leaked
The Updoc data breach is a reminder that, despite technological advances, cyberattacks remain a serious threat to the healthcare sector. Organizations must remain vigilant and invest in strong security measures to protect patient data and maintain customer trust.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
