Australian Clinical Labs
Disclosed Oct 27, 20223 years ago223,000 affectedSettled
Medlab Pathology cyberattack exposes data of 223,000 people
Australian Clinical Labs revealed eight months after the fact that a February 2022 attack on its Medlab Pathology unit exposed data of about 223,000 patients and staff, some posted to the dark web. The Federal Court ordered A$5.8 million in penalties, the first civil penalties under the Privacy Act.
What is known
| People affected | 223,000 (as reported by the organization) |
|---|---|
| Disclosed | Oct 27, 2022 |
| Discovered | Feb 2022 |
| Attack | Hacking |
| Data exposed | Names, Health, Government IDs, Payment cards, Other |
| Sector | Healthcare · AU |
| Status | Settled |
| Lawsuit or fine | A$5.8M Federal Court civil penalties, OAIC case (2025) |
Sources
| Source | |
|---|---|
| Pathology company Australian Clinical Labs reveals it was hit by cyber attack in Februaryabc.net.au · News | News |
| Australian Clinical Labs ordered to pay penalties in relation to Medlab Pathology data breach in first for Privacy Actoaic.gov.au · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Oct 27, 2022 | 223,000 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.