Summary
- Environment: Oral Health Fee For Service Scheme administration website
- Operational impact: Provider documents obtained; dental care continued
- Financial impact: No quantified cost disclosed
- Record status: Developing record. Reviewed November 7, 2026; updated as evidence emerges.
What happened
A third party unlawfully obtained uploaded records from NSW Health’s Oral Health Fee For Service Scheme administration website on October 29, 2026. NSW Health detected the activity within hours. [1]
Impact
Records generally concerned dental practitioners’ radiation licences and vaccination documents, particularly COVID-19 vaccination statements. Individual scope remained under review; no patient data had been identified as compromised. [1]
Timeline
Provider documents obtained; incident detected
Uploaded practitioner records were obtained unlawfully, and NSW Health detected the incident within hours. Source account.
[1]FAQ sets out affected document types and response
The revised FAQ identified the document types under review and confirmed continuing dental care. Source account.
[1]Briefing updated
This briefing was last reviewed and updated on November 7, 2026.
Threat Group & Attack Vector
The incident affected an isolated server. NSW Health had not publicly established the initial access method or attacker identity. [1]
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
NSW Health secured the isolated affected server and said it considered there was no ongoing threat. Dental care, voucher issuance and payments continued; affected-practitioner notifications were being prepared while police and cyber authorities investigated. [1]