An Australian neurology practice is investigating claims that patient records were stolen, after a newly emerged extortion gang posted detailed file counts to its leak site.
The group, which calls itself N0n, listed Hunter Neurology of New South Wales on October 13, ransomware.live reported. The listing claims the theft of 15,252 patient images and scans, 11,819 patient letters and reports, 439 laboratory results, and 839 records-system files, plus four complete weekly backups of the practice’s systems.
The Australian outlet Cyber Daily reported on October 15 that Hunter Neurology is investigating the claims. The practice had not confirmed the breach at the time of reporting. N0n is flagged as an emerging group, meaning its claims should be treated with caution until independently verified.
The claimed haul is notable for its specificity. A dump containing imaging studies, clinical correspondence, and lab results would amount to a near-complete clinical picture for thousands of patients, the kind of data that fuels medical identity theft and targeted extortion of individuals.
Australian medical practices are attractive targets because they hold rich records but often run lean IT teams. The incident reinforces a pattern seen across the sector this year: smaller specialty practices, not just large hospital systems, are being catalogued and posted by extortion crews.
For clinics in similar positions, the practical steps are unchanged. Segment backups from production networks so a single intrusion cannot reach every copy, enforce phishing-resistant multi-factor authentication on remote access, and test whether a full restore is actually possible before an incident forces the question.
Patients of a listed practice should be alert for phishing messages referencing genuine clinical details, which are a hallmark of post-breach fraud.
