As previously advised, Rowville Health has been experiencing an IT disruption that affected some of our systems. We can now confirm that this disruption was caused by a cyber incident involving unauthorised access to a small portion of our internal IT systems by an unknown third party.

This led to certain systems being taken offline temporarily as a precautionary measure.

As soon as we became aware of this incident, we enacted our incident response plan and began work to ensure the security of our systems and determine what happened. We are engaging with external IT and cyber security experts to assist with our response to the incident.

We understand this news may cause concern. We would like to assure you that our IT team have managed to restore most systems. That said, some recent clinical notes remain unavailable and we please ask for your patience while we continue to respond this incident.

If our investigation indicates that any data has been impacted, we will take steps to assess the impact and keep our team and patients informed and supported, in line with our obligations.

We are also liaising with the Australian Cyber Security Centre (ACSC), the Office of the Australian Information Commissioner (OAIC), and the National Office of Cyber Security (NOCs), as well as the relevant authorities in response to this incident alongside various experts across the cyber security industry.

At this stage, there is no evidence that any impacted data has been disclosed. However, as a precaution, we have implemented advanced monitoring measures to ensure we are promptly informed of any developments should they arise.

Whilst most functions have been restored, we are still experiencing some delays in answering calls due to high volume.

Please consider making appointments online via the AMSConnect app or by the “book your appointment here” button on our website.

We thank our community for their understanding and patience as we work through this process. We will provide further updates as our investigation progresses. Any questions should be directed to enquiry@rowvillehealth.com

 

Last updated: 2 July 2026

As many of you will already be aware Rowville Health recently experienced a cyber incident [that may have affected some personal information of our past and current patients].

Although there is no indication of data compromise, we are taking a cautious and proactive approach.

This notification is being provided as a precautionary measure and as part of our commitment to transparency.

Cyber incident investigation into impacted information
We experienced an IT disruption caused by unauthorised access to a small portion of our internal systems by an unknown third party. The incident was quickly contained, systems were secured, and our services have now been restored.

Importantly, our investigation to date has not found any evidence that patient data was taken or misused.

What has Rowville Health done in response

As soon as we became aware of this incident, we enacted our incident response plan. This included securing our systems, engaging external IT and cyber security experts to assist with our response to the incident and commencing a detailed investigation to determine what happened and what information was involved.
While most systems have been restored, some recent clinical notes remain unavailable. Due to these limitations, we have not been able to definitively determine which individuals’ records may have been present on affected systems at the time of the incident.
We have also notified the Australian Cyber Security Centre (ACSC), the Office of the Australian Information Commissioner (OAIC), National Office of Cyber Security (NOCs), and the Victorian Health Complaints Commissioner (HCC) as well as the relevant authorities in response to this incident.

What information may be affected

Out of an abundance of caution, we are notifying individuals whose information may have been present on affected systems. The types of personal information that may have been involved includes information provided by patients while receiving care at our practice.
Although there is no indication of data compromise, we are taking a cautious and proactive approach by implementing sophisticated monitoring measures to ensure we are promptly informed of any developments should they arise.
If you are not a past or current patient of Rowville Health, you are not affected by this incident and no action is required.

What steps can individuals take to protect their information?

Please click this link and carefully read the ‘Cyber safety guidance’ and specific advice for any types of information you may have previously provided to Rowville Health.
We are taking all appropriate steps in response to this incident and are committed to supporting those affected.
We thank our community for their understanding and patience. We continue to monitor the situation closely and will update our website if anything changes.

If you have any questions, please contact us at: enquiry@rowvillehealth.com.