What happened
Genea, one of Australia’s largest IVF providers, suffered a cyber incident: according to court orders cited by TechCrunch, an attacker accessed its Citrix environment on 31 January 2025 and extracted about 940GB of data on 14 February 2025 [techcrunch-genea]. The Termite ransomware group claimed responsibility, and Genea confirmed that data had been published externally [techcrunch-genea], [acs-genea]. Genea’s patient notifications in July 2025, as reported, said the data included full names, addresses, phone numbers, dates of birth, Medicare card numbers, medical diagnoses and clinical data [acs-genea]. The number of patients affected was not officially quantified and is not estimated here.
Timeline
- 2025-01-31 — Access to Genea’s Citrix environment, per court orders as reported [techcrunch-genea].
- 2025-02 — About 940GB extracted (14 February, per court orders); Genea disclosed the incident; data later published externally [techcrunch-genea].
- 2025-07 — Genea said it was completing its investigation and notifying affected patients [acs-genea].
- 2025-11-03 — Law firm Phi Finney McDonald lodged a representative complaint with the OAIC, after investigating a possible class action [genea-oaic-complaint], [genea-lw].
Current status
Disclosed. A representative complaint has been lodged with the OAIC; no court class action has been sourced, and no OAIC determination has been found [genea-oaic-complaint], [genea-lw]. Figures are as reported.
Why it matters
Among the most sensitive health data imaginable — fertility records — leaked publicly. A stark case in the health sector’s exposure to data-theft extortion.