What happened
NSW Health confirmed in June 2021 that identity information — and in some cases health-related personal information — was contained in files accessed during the global Accellion file-transfer breach, though its medical-records systems were not affected [nswh-co], [nswh-itnews].
Current status
Disclosed. The number affected was not disclosed. This was a separate agency caught in the same Accellion event as Transport for NSW.
Why it matters
Even without clinical-system access, exposure of identity and some health data from a health department is sensitive.