Police in New South Wales are investigating a major data breach at NSW Health after an attacker accessed a server holding data for a dental voucher scheme, with detectives now looking overseas for those responsible.

NSW Health detected the breach after an automatic system flagged unusual traffic on a remote server. The affected system is the website behind the Oral Health Fee for Service Scheme, which lets the public dental service issue vouchers for treatment by private dentists.

Provider data taken, patients unaffected

Officials say no patient data was involved. Richard Taggart, chief executive of eHealth NSW, said a small number of third-party provider records may have been stolen, while Cyber Security NSW described a limited breach of an isolated server.

Detective Superintendent Matt Craft, commander of the NSW Police Cybercrime Squad, said the breach involved a significant amount of personal identification information about third-party health providers, mainly dentists. Police believe about 4GB of data was taken.

A much larger claim, unverified

A user calling themselves "bytetobreach" has claimed on an underground hacking forum to have taken about 70GB, or around 100,000 sensitive documents, by exploiting a misconfigured subdomain. Police have rejected the 70GB figure, and neither the document count nor the claimed method has been verified. No ransom is being sought, according to the claim.

NSW Health reported the unauthorised access on Thursday 29 October, and police were alerted at about 1pm on Friday 30 October. The incident was declared a major incident on Wednesday 4 November, and detectives are investigating under Strike Force Civic alongside NSW Health and Cyber Security NSW. Police said on 5 November that the people behind it appeared to be outside Australia, and that they would work with international partners, including the FBI, if a suspect was identified overseas.

Sources: Information & Data Manager, Police look offshore after NSW Health breach, 6 November 2026; The Medical Republic, Police investigating NSW Health cyber breach, 4 November 2026; Tech Insider, NSW Health breach, overseas hackers suspected, 5 November 2026; OODA Loop, NSW Police Cybercrime Squad investigates major data breach at NSW Health, 4 November 2026.