Incransom Claims 3.2 TB Data Theft From Partnered Health Group
Summary
Incransom claims it stole 3.2 TB of data from Australia’s Partnered Health Group in June 2026, including patient and staff records. The post cites the group’s leak-site disclosure; the claims are unconfirmed.
Key points
- The monitoring record names Partnered Health Group as the victim and incransom as the actor, attributing the claim to the group’s leak-site disclosure.
- Incransom claims unauthorized access on June 23, 2026, and exfiltration of 3.2 TB across 21 servers.
- The group claims the data includes more than 17,727 named patient files and medical records dating from 1999 to 2026.
- The alleged data also includes staff records and Bupa corporate billing and program information.
- Incransom claims negotiations were ignored for 22 days and threatens staged publication and a public data dump if no settlement is reached within 10 days.
- The post says it cannot confirm the group’s claims.
Article Details
- Victim
- PARTNERED HEALTH GROUP
- Attack Date
- 2026-06-23
- Exfiltration Status
- Reported in the article as claimed by incransom; the source says the claims are unconfirmed.
- Exfiltrated Data
- The group-reported dataset allegedly includes patient medical records, staff and HR records, SQL/database backups, and Bupa corporate billing and program information.
- Exfiltrated Size
- 3.2 TB (claimed)
- Ransom Demand
- No amount reported; the group claims negotiations were ignored and threatens publication unless a settlement is reached.
- Leak Status
- Incransom threatened staged publication and a full public data dump if no settlement is reached within 10 days; no publication is confirmed in the article.
Threat Actors
Products
Best Practice3.2 TB of data—including 27 years of patient records, payroll/HR files, and multiple SQL and Best Practice database backups—from 21 servers across 21 clinics.QuickBooksFinancial and governance data reportedly includes QuickBooks records from 2004 to 2026, Medicare billing, DVA remittances, private health fund claims, RACGP accreditation files, patient consent templates, and internal