[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPeoCC-L55PsmssDzkmkB5Ts4wkMnts7hRRkk7YXnYcM":3},{"article":4,"iocs":47},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":29,"category":30,"article_tags":34},"842e8c76-2317-4c1b-a42d-6738b932d267","Ochre Health Data Breach: 25K+ Patients' Medical Records for Sale","ochre-health-data-breach-25k-patients-x27-medical-records-for-sale-8f6110","A threat actor using the alias 2019 claims to be selling a patient database stolen from Ochre Health, an Australian medical-centre network providing general practice and allied health services.","A threat actor known as '2019' is reportedly selling a database containing the medical records of over 25,000 patients from Ochre Health, an Australian medical network. The stolen data includes sensitive information such as names, dates of birth, contact details, Medicare and DVA numbers, appointment histories, and billing information. If confirmed, this breach poses a significant risk of identity theft, fraud, and highly convincing medical-themed scams for the affected individuals.","Ochre Health data breach: 25K+ patients' medical records offered for sale.","Data25K patients \u002F 700K records PriceOne-time sale (crypto) CountryAustralia Actor2019 ▣Post details TargetOchre Health (medical-centre network) CountryAustralia SectorHealthcare ClaimPatient database offered for sale Data25K+ patients, 700K+ records (medical) ObservedJun 9, 2026 PriceOne-time sale (BTC\u002FETH\u002FXMR) Actor2019 (GOD user) !Allegedly exposed 25K+ patients \u002F 700K+ records (claimed) Patient names & dates of birth Mobile, home phone & email Home address, suburb & postcode Medicare numbers, refs & expiry DVA (veterans' affairs) numbers Appointment & treating-doctor details Payment & billing information ◱Screenshot Screenshot 1 Redacted preview ⚠Potential impact If genuine, this is an especially serious exposure: a healthcare dataset linking 25,000+ patients to dates of birth, contact details, Medicare and DVA numbers, appointment histories, and treating doctors. Medicare and DVA numbers are sensitive Australian health identifiers that can enable Medicare fraud, identity theft, and highly convincing medical-themed scams, and the health context itself makes any exposure particularly harmful to patients. Health data is among the most damaging information to leak. Record counts and authenticity are unconfirmed. iStatus Unverified Column listings across three tables and sample patient records were posted to an underground forum, offered as a one-time cryptocurrency sale via Session and TOX contacts; the sample records and contact identifiers are not reproduced here. The claim has not been independently confirmed and Ochre Health has not publicly addressed it. Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots. Check out the threat feed or ransomware feed (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. View pricing → DARK WEB INFORMER - THREAT INTELLIGENCE","https:\u002F\u002Fdarkwebinformer.com\u002Fochre-health-data-breach-25k-patients-medical-records-for-sale\u002F","https:\u002F\u002Fstorage.ghost.io\u002Fc\u002F6b\u002F16\u002F6b16ac9c-cd67-432f-b0f3-bbec941084ff\u002Fcontent\u002Fimages\u002F2026\u002F06\u002F57628387962358975626398766489723988.png","2026-06-09T15:21:41+00:00","2026-06-09T16:00:08.698+00:00",8,[18,21,24,27],{"name":19,"type":20},"Ochre Health","vendor",{"name":22,"type":23},"2019","threat_actor",{"name":25,"type":26},"Medicare","product",{"name":28,"type":26},"DVA","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,37,42],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]