St Vincent's Health has confirmed no sensitive personal information was stolen during a cyberattack late last year after the company finished its investigation of the incident.
Australia's largest not-for-profit health and aged care provider today provided an update on last December's hack.
External experts CyberCX completed their forensic investigation into St Vincent's Health data that was accessed or stolen by the cybercriminals.
"That forensic investigation has concluded that, to the best of CyberCX's ability to ascertain, there is no evidence that sensitive personal information was stolen from our network by the cybercriminals." a statement by St Vincent's Health said.
"In particular, there is no evidence that any identification documents (driver's licences, passports, Medicare cards), medical records or banking information have been stolen from our network."
Monitoring had also detected no evidence of stolen information being sold on the Dark Web, the health insurer said.
Australia's surprise spot on list of most-hacked countries
Investigators found the data identified as having been stolen before December 19 2023 amounted to about 4.3 gigabytes.
St Vincent's Health says it is overhauling some of its system monitoring as a result of the hack.
This includes improving it 24-hour, seven-day-a-week monitoring across its digital network to detect and respond to suspicious activities.
The health insurer says it has briefed federal and state governments, including regulators, on the findings of the investigation.
"We are deeply appreciative of how the Federal Government has supported us to navigate an unenviable situation made harder owing to the time of year this occurred," said St Vincent's Health chief executive Chris Blake.
"In particular, the support of the Acting National Cyber Security Coordinator, the National Office of Cyber Security, the Australian Signals Directorate, the Australian Federal Police andthe Department of Health and Aged Care has been invaluable to us."
