Cyber Security: Everyone has a role to play
As healthcare continues to become more digital, protecting patient information is more important than ever. From allied health practices and general practices to aged care services, every provider handles sensitive health information. The health sector continues to be a significant target for cyber-attacks, making cyber security an essential part of everyday practice.
Every member of the healthcare workforce plays a role in protecting patient information, maintaining business continuity and ensuring trust in our healthcare system. A cyber incident can result in the loss of sensitive information, disruption to services, reputational damage and significant impacts on patient care.
Common Threats Facing Healthcare Organisations
The Australian Digital Health Agency identifies phishing and ransomware as two of the highest-risk cyber threats facing the Australian health sector.
Phishing attacks often arrive as emails, text messages or phone calls designed to trick staff into revealing passwords or sensitive information.
Ransomware can prevent organisations from accessing critical systems and patient records until payment is demanded.
Simple Steps to Strengthen Cyber Security
Healthcare providers can improve their cyber resilience by focusing on a few key actions:
Keep software, operating systems and devices up to date with the latest security patches.
Be cautious of unexpected emails, text messages and phone calls requesting information or login credentials.
Use strong passwords and change them immediately if they may have been compromised.
Ensure all staff receive regular cyber security awareness training.
Subscribe to trusted cyber security alerts to stay informed about emerging threats:
Subscribe here to the Digital Health Cyber Security Alerts for healthcare providers
What to Do If an Incident Occurs
If your organisation experiences a cyber security incident, support is available through the Australian Cyber Security Centre's 24/7 hotline on 1300 CYBER1 (1300 292 371). Healthcare providers may also have obligations to notify the My Health Record System Operator and the Office of the Australian Information Commissioner (OAIC) in the event of a suspected or actual data breach.
Free Resources and Training
The Australian Digital Health Agency offers a range of free resources to help healthcare organisations improve cyber awareness and security practices. These include:
Need support?
If you have any questions, please contact the Adeliade PHN Digital Health Team on digitalhealth@adelaidephn.com.au
07 September 2026