An "isolated server" operated by NSW Health has been targeted by an unknown attacker, prompting a criminal investigation and the declaration of a major incident. NSW Police said it was alerted to the alleged data breach at about 1 pm on Friday 30 October, and the Cybercrime Squad has opened an investigation under Strike Force Civic, working closely with NSW Health and Cyber Security NSW. Cyber Security NSW has stated the breach was confined to an isolated server, that no patient data has been impacted or is currently at risk, and that the incident was detected and contained. The scale of any data exposure and the attacker's identity remain under investigation, with police yet to name a suspect or motive. For a jurisdiction whose health networks have historically been a prime target for ransomware operators, the quick declaration and containment point to matured detection capability — but the case is a reminder that even well-resourced public-sector health estates remain on the targeting list.

• Source article