Breaches and incidents
Icon Group (Icon Cancer Centre, Australia): patient documents accessed on a supplier’s fax-to-email platform
Icon said there was “unauthorised access to some patient information held on a supplier’s system,” an externally hosted platform that converts incoming...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Icon said there was “unauthorised access to some patient information held on a supplier’s system,” an externally hosted platform that converts incoming faxes to email; it believes the records are discrete correspondence documents, not full patient files.
- Root cause: not disclosed.
- No attacker named.
- Icon said core clinical and patient management systems were not affected, reset access to the system, engaged forensic advisers, notified the Australian Federal Police and regulators, and is confirming which patients are involved (notice updated 15 Oct).