Since our original notification (which can be found here) we have been working to recover the data that had been encrypted as a result of the cyber incident.
We have been able to recover the majority of patient reports that had been impacted by the cyber incident. If you were previously unable to obtain a copy of a report and you or your referring doctor still require that report, please contact your local clinic, details of which you can find here.
We are now in the process of attempting to recover historical scanned images which may take some time.
We will post further updates on the website as this recovery process progresses.
Since our last update, we have successfully decrypted our main IT information systems and we have been able to conduct an analysis of potentially impacted data.
If we determine that the Medicare card, Centrelink card or Veteran Card information that you provided to us prior to the cyber incident is current and unexpired, we will make every effort to contact you directly by post no later than the 31st July 2024 and provide you with additional steps that you may wish to consider undertaking to protect your personal information.
We can confirm that Quantum does not collect or store credit card data, nor does Quantum store scanned copies of Medicare cards or other identity cards (such as Centrelink card or Veteran Card).
We are making every effort to write directly to patients where we held valid and unexpired Medicare cards, Veteran Cards, or Centrelink cards.
If you do not receive a letter but believe we held your current Medicare card, Centrelink card, or Veteran Card information prior to the incident, please contact our Support Centre on 1300 059 750.
Quantum is currently addressing prior requests for reports or scans and, where the necessary paperwork and authority are in place, sending out the requested reports. If you or your legal representative have not received a response by 31st July 2024, please contact the support centre for assistance. Please note at this stage, we are only able to provide copies of reports, copies of scans are still currently unavailable.
Yes, we notified New South Wales and Commonwealth regulatory bodies and agencies as soon as we became aware of the cyber incident. With the partial recovery of patient records, we have updated these authorities and notified law enforcement about the latest developments. We will continue to do so if there are any further developments.
If you have been a patient of Quantum, your Medicare details may have been impacted by this incident. If the information we held about you prior to the incident includes a valid and unexpired Medicare number we will write to you directly and provide you with advice on how to protect the security of your Medicare account, including how to replace your card, should you wish to do so.
If you believe that we did hold information about your current Medicare card prior to the incident and you have not received a letter from us, please contact our cyber incident support centre on 1300 059 750.
Please note, Quantum does not store copies of Medicare cards.
We have reviewed the records of patients who have provided their Veteran Card details and have determined that, taking into account advice from government agencies and given the limited information held, these patients are not required to replace their cards. However, if you are concerned about the security of your Veteran Card details, you can contact the Department of Veteran’s Affairs for further information on 1800 838 372.
If you have been a patient of Quantum, your Centrelink Reference Number (CRN) may have been impacted by this incident. If the information we held about you prior to the incident includes a valid CRN we will write to you directly.
You do not need to request a replacement Centrelink concession card (if you have one). If you are concerned about the security of your Centrelink account, you can contact Services Australia to add a verbal password to your account.
Please visit www.servicesaustralia.gov.au/databreach for more information on how you can protect your personal information after a data breach.
Like any other healthcare organisation, we collect personal information where it is necessary for our functions and activities, and we are required to retain certain information for certain periods of time depending on the nature of the data involved and our legal obligations regarding the retention of those records.
No. We can confirm that any information connected to My Health Record is not impacted by this incident.
We have rebuilt our systems so that they are stronger and more secure, including:
At this stage, there is no evidence to suggest that any of Quantum’s or our patients’ information has been published online. We will update this page if we become aware of any change to this situation.
We will update the cyber incident notice page on our website with any news or developments.
If you would like any further information, please contact our Support Centre on 1300 059 750
We encourage you to take these precautions to protect your personal information:
If you have further questions or concerns, please contact our Support Centre on 1300 059 750
If you have further questions or are feeling concerned about this incident, our Support Centre is here to provide guidance and support on 1300 059 750.
Please note that we may need to verify your identity if your inquiry relates to personal information held by us.