Short answer
St Andrew's Hospital in Adelaide said on 8 October 2026 that its internal investigation found a subset of data from its servers had been downloaded. It took systems offline, called in forensic experts, contacted affected people and notified the OAIC and the Australian Cyber Security Centre.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | St Andrew's Hospital |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | Private hospital |
| Country | Australia |
| Disclosed | 2026-10-08 |
| People or records affected | A group of individuals. The hospital had not given a number in the reports we read. |
What data was exposed
- Names, phone numbers, residential addresses, email addresses and dates of birth (as reported by Your Life Choices)
- Medicare card numbers and healthcare identifiers (reported by one outlet only)
- The hospital says personal and health information was taken, without itemizing it in the ABC report
What happened
St Andrew’s Hospital, a private hospital in Adelaide, told the public on 8 October 2026 that a group of individuals had been affected by a data breach, ABC News reported. Its chief information officer said an internal investigation found a subset of data from its servers had been downloaded. The hospital took systems offline as a precaution, strengthened security and brought in forensic experts.
CEO Angela McCabe said affected people have been contacted directly and given information on how to protect their personal details. The hospital notified the Office of the Australian Information Commissioner (OAIC) and the Australian Cyber Security Centre, and is working with government agencies on extra measures to detect suspicious and fraudulent activity.
What was exposed
ABC did not list the data types. Your Life Choices reports the hospital confirmed that personal and health information was taken, and lists names, phone numbers, residential addresses, email addresses and dates of birth. It also reports Medicare card numbers and healthcare identifiers. We found that last detail in one outlet only, so treat it as reported but not confirmed by the hospital in what we have read.
The political response
South Australian Premier Peter Malinauskas said he expected a briefing on what occurred and whether any criminal activity was involved. According to Your Life Choices he also said the state expects full transparency, even though the hospital is private, and that federal authorities were making similar inquiries.
Why this matters
Health data is hard to change. A name, address, birth date and Medicare number are enough to make a convincing call that claims to be from a hospital, a health fund or a government agency. If you are a patient, expect contact that seems well informed.
Our guide to government impersonation scams describes how those calls work, phishing messages covers links in texts and emails, and what to do after a data breach lists the steps to take.
What we do not know
The number of people affected, how the intruder got in, whether a ransom was demanded, and who is behind the attack have not been reported in the sources we read. We will update this page when the hospital or a regulator publishes more. See our editorial policy.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Calls or texts posing as the hospital, Medicare or your health fund that quote your details and ask for payment or verification
- Fake emails offering identity protection or compensation in return for personal information
- Impersonation of government agencies claiming your identity has been misused
What to do if you are affected
- 01Only trust contact from the hospital that arrives through the details it has on file for you, and verify by calling the hospital on its published number.
- 02Do not give Medicare, bank or ID details to anyone who contacts you about the breach.
- 03Ask your bank and other providers about extra verification on your accounts if you are told your identity details were included.
- 04Consider a credit report ban or alerts if government ID numbers were involved, and check IDCARE guidance for your situation.
- 05Keep a record of any suspicious contact and report scams through Scamwatch.
Frequently asked questions
What did St Andrew's Hospital say happened?
ABC News reports its chief information officer said an internal investigation found a subset of data from its servers had been downloaded. The hospital took systems offline as a precaution and engaged forensic experts.
How many people are affected?
The hospital described a group of individuals and, in the reports we read, did not confirm a number.
What data was taken?
The hospital confirmed personal and health information. Your Life Choices lists names, phone numbers, addresses, email addresses and dates of birth, and also reports Medicare numbers. We saw the Medicare detail in that outlet only.
Which authorities were told?
The hospital notified the Office of the Australian Information Commissioner and the Australian Cyber Security Centre, and says it is working with government agencies on measures to detect fraudulent activity.
Has anyone claimed responsibility?
No attacker claim appeared in the sources we read.
Sources
- Group of individuals impacted by St Andrew's Hospital data breach, ABC News, 2026-10-08
- Major hospital cyberattack raises fears over stolen Medicare information, Your Life Choices, 2026-10-09
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.