cyber incident- Pentlowe health

24 Aug 2026

Pentlowe Health recently became aware of an incident in which one mailbox belonging to one of our employees was subject to unauthorised access by an unknown third party. 

As soon as we became aware of the incident, immediate steps were taken to secure our systems, and we engaged experts to provide us with advice and to commence an investigation. 

Our investigation identified that some patient-related information was accessed by the unauthorised party. However, due to technical limitations in the investigation, we are unable to confirm with certainty the direct impact to specific patients. For this reason, we are sharing the details of the incident here to provide relevant information and guidance to our patients whose information may be involved.

We can confirm that the unauthorised access was limited to an employee mailbox, and we have no evidence that Pentlowe Health’s main electronic medical record system (EMR) was compromised.

What information has been involved: 

This incident may have affected personal information patients have provided to us, or which was collected while providing patients with healthcare services. This may include basic personal and contact details (name, email address, date of birth), Medicare information, and health information.

We have provided access to guidance here on the recommended steps patients can take if they are concerned their information may be involved.

We have notified the Office of the Australian Information Commissioner (OAIC) about the incident. 

If you have any questions about this incident, please contact us, on 03 8391 7020 or email us at admin@pentlowehealth.com.au

We thank you for your patience and apologise for any concern this incident may cause you.

The Pentlowe Health Team.