Telehealth provider Updoc has confirmed a data breach that may have exposed the contact information of more than one million Australians.
The company said on Friday that an unauthorized party accessed a third-party system used to support its operations for a brief period.
What Information Was Accessed?
According to a spokesperson, the breach involved contact information, which may have included names, email addresses, and postal addresses of account holders. Updoc's own systems were not accessed, and health, financial, and payment details were not compromised.
Updoc took immediate action to block the unauthorized access and has found no evidence of further access after the initial event.
Customer Advice and Response
The spokesperson advised that customers are not required to take immediate action, as login and account security remain unaffected. Updoc apologized for any concern or inconvenience caused.
In an email sent to customers on Wednesday, Updoc's security team described the message as a precautionary measure. The email urged customers to remain alert for unexpected emails or letters about their accounts and to forward anything suspicious to Updoc. It emphasized that Updoc would never ask for passwords via email.
Background and Recent Cyberattacks
Updoc, launched in 2021, has scaled past one million Australians using its 24/7 doctor consult services, according to co-founder Dylan Coyne earlier this year.
This breach follows a major cyberattack on Partnered Health, which runs more than 60 clinics across Australia, where patients' medical records may have been stolen. Additionally, nearly one million customers were affected by a cyber attack on Origin Energy on July 22.
