Australian Clinical Labs

Disclosed Oct 27, 2022223,000 affectedSettled

Medlab Pathology cyberattack exposes data of 223,000 people

Australian Clinical Labs revealed eight months after the fact that a February 2022 attack on its Medlab Pathology unit exposed data of about 223,000 patients and staff, some posted to the dark web. The Federal Court ordered A$5.8 million in penalties, the first civil penalties under the Privacy Act.

What is known

People affected	223,000 (as reported by the organization)
Disclosed	Oct 27, 2022
Discovered	Feb 2022
Attack	Hacking
Data exposed	NamesHealthGovernment IDsPayment cardsOther
Sector	Healthcare · AU
Status	Settled
Lawsuit or fine	A$5.8M Federal Court civil penalties, OAIC case (2025)

Sources

Newsabc.net.au

Pathology company Australian Clinical Labs reveals it was hit by cyber attack in February

Regulatoroaic.gov.au

Australian Clinical Labs ordered to pay penalties in relation to Medlab Pathology data breach in first for Privacy Act

Notices filed

TotalOct 27, 2022

Research223,000 people

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about Australian Clinical Labs