Ochre Medical Centre Tuggeranong cyber incident

As you may be aware, Ochre Medical Centre Tuggeranong (Ochre Tuggeranong) experienced a cyber incident involving unauthorised access to two Ochre Tuggeranong HotDoc user accounts by an unknown third party.

This notice provides an update from previous notices found here, with further information about the incident following Ochre Tuggeranong’s investigation, the types of information that may have been involved, and steps patients can take as a precaution.

WHAT HAPPENED?

In June 2026, two Ochre Tuggeranong HotDoc user accounts were identified as having been accessed by an unauthorised third party. HotDoc is an online platform that supports healthcare providers in communicating with patients, scheduling appointments, and managing appointment-related information.

Upon becoming aware of the incident, Ochre Tuggeranong immediately took steps to secure the affected accounts and engaged external cyber security specialists to investigate the incident and assist with its response.

The investigation determined that the unauthorised access was limited to the affected HotDoc accounts. The incident did not impact Ochre Tuggeranong’s broader IT environment, and the delivery of healthcare services continued without disruption.

WHAT INFORMATION MAY BE AFFECTED

As a result of our investigation, we have identified that limited information associated with booking, scheduling and managing certain consultations was impacted. Ochre Tuggeranong has not identified any evidence that clinical records or treatment notes were impacted as part of this incident.

The types of personal information involved for almost all individuals is limited to a combination of the following:

• contact details (including name, address, email address and phone number);
• demographic information (including date of birth and gender); and
• limited appointment and booking information (including appointment dates and times and your treating practitioner).

We have directly notified a small number of individuals in respect of additional information impacted in connection with managing consultations, to provide support and guidance on how best to respond.

We wish to assure you that if you have not received a separate additional notification by email or post to confirm that additional information has been impacted, there is no action needed. On a precautionary basis, however, we recommend that you review the cyber security guidance provided below.

If you have not attended a consultation or made an appointment with Ochre Tuggeranong, you are not affected by this incident and no action is required.

We acknowledge that the unauthorised access of health-related information may cause concern. It is important to note, however, that malicious actors most commonly seek information that can be used for identity theft or financial fraud, including government-issued identification and financial account details. Appointment information alone is generally not considered highly valuable for these purposes.

WHAT ACTION HAS OCHRE TUGGERANONG TAKEN?

As soon as we became aware of this incident, we enacted our incident response plan. This included securing our systems, engaging external IT and cyber security experts to assist with our response to the incident and commencing a detailed investigation to determine what happened and what information was involved.

Ochre Tuggeranong has informed relevant government agencies of the incident, including the Australian Cyber Security Centre (ACSC) and the Office of the Australian Information Commissioner (OAIC), and is working with them as part of our response.

WHAT STEPS CAN YOU TAKE TO PROTECT YOUR INFORMATION?

We appreciate that this news may cause concern. We would like to reassure you that, at this time, we have found no evidence that your information has been misused.

We encourage you to review the ‘Questions and Answers’ section below, which outlines detailed advice on precautionary steps you can take to protect your information against potential misuse.

Should you have any questions once you have reviewed this notification, please do contact us at [email protected].

We thank our community for their understanding and patience. We are continuing to monitor for any further developments and will update our website with anything material.

QUESTIONS AND ANSWERS

Please review this advice carefully and consider taking the precautionary steps outlined below to protect your information. If you have any questions, please contact our team on [email protected].

Q: What precautionary steps can I take?
A: There are some steps you can take to help protect yourself against misuse of your information. We recommend you consider taking the following steps.

Contact information and demographic information
If you have previously booked or attended a consultation with Ochre Tuggeranong, some of your contact and demographic information may have been impacted.

Where a third party has accessed your contact or demographic information, it is important to:

• be aware of email, telephone and text-based scams. Do not share your personal information with anyone unless you are confident about who you are sharing it with;
• when on a webpage asking for your login credentials, take note of the web address or URL (‘Uniform Resource Locator’). The URL is located in the address bar of your web browser and typically starts with https://;
• if you are suspicious of the URL, do not provide your login details. Contact the entity through the usual channels to ensure you are logging into the correct web page. Please note that we will never contact you to ask for your username or password;
• enable multi-factor authentication for your online accounts where possible, including your email, banking, and social media accounts;
• ensure you have up-to-date anti-virus software installed on any device you use to access your online accounts;
• check the strength of your passwords and whether they have been involved in any data breaches on the NSW Government password checker website: https://www.nsw.gov.au/id-support-nsw/passwords; and
• follow the Australian Competition and Consumer Commission’s Scamwatch guidance for protecting yourself from scams here: https://www.scamwatch.gov.au/get-help/protect-yourself-from-scams/.

For more information, you can visit the OAIC’s tips for further guidance about protecting your identity: https://www.oaic.gov.au/privacy/your-privacy-rights/tips-to-protect-your-privacy/.

Appointment information
If you have previously booked or attended a consultation with Ochre Tuggeranong, some of your administrative appointment information may have been included in the impacted data.

This information is limited to treating practitioner, appointment date and time and type of consult, and did not include consultation notes, treatment records or other detailed clinical information.

We acknowledge that the unauthorised access of health-related information may cause concern. It is important to note, however, that malicious actors most commonly seek information that can be used for identity theft or financial fraud, including government-issued identification and financial account details. Appointment information alone is generally not considered highly valuable for these purposes.

We are sorry for any distress this incident may cause. If you would like support, we encourage you to contact your regular healthcare provider or GP.

Q: Who can I contact for more information about cyber security and protecting my online identity?
A: Additional general resources on identity and cyber security support can be found here:
• https://www.oaic.gov.au/privacy/data-breaches/data-breach-support-and-resources/
• https://www.idcare.org/
• https://www.cyber.gov.au/protect-yourself
• https://www.cyber.gov.au/report-and-recover/have-you-been-hacked

Q: I have more questions – who can I talk to?
A: If you have further questions about this incident or the information contained in this notice, please contact us at: [email protected].

Update #5 28.08.26