What happened
In 2020 the ASX-listed aged-care provider Regis Healthcare disclosed that an overseas third party had accessed its systems, and that some data was copied and certain personal information published [regis-co]. Media reported the attack to be by the Maze ransomware group [regis-itnews], [regis-databreaches]. Regis said it notified the OAIC and ACSC [regis-co].
Timeline
- 2020 — Cyber attack on Regis systems; no source we have loaded gives an exact attack date [regis-itnews].
- 2020-08-03 — Regis published its statement on the incident, including notification of the OAIC and ACSC [regis-co].
Current status
Disclosed. The number of people affected was not disclosed, so none is asserted here.
Why it matters
Aged-care providers hold sensitive resident data; ransomware that both encrypts and leaks turns an IT incident into a privacy breach.