Public health officials in Australia’s Northern Territory have admitted that twelve expectant mothers were caught up in a privacy breach at Royal Darwin Hospital, not the five patients the department originally named. The correction came only after ABC News confirmed that four of the women had never been contacted.
The exposure was manual, not digital. A visiting medical observer placed images and video of obstetric records on an Instagram account followed by roughly 28,000 people. Material included patient names, medical histories and treatment plans, plus footage from an internal staff meeting.
Who was behind the account
Reporting by NT Independent traced the account to Dr Neda Mogharehabed, an internationally trained observer on a short placement in the hospital’s obstetrics unit, which has since been terminated. The doctor said she could not confirm the content came from her account and did not intend to disclose patient information.
The Northern Territory health minister called the incident a serious breach of trust and a betrayal, apologized publicly, and referred the matter to police.
What it says about access governance
No firewall would have stopped this. It is the oldest exposure path in clinical settings, a credentialed visitor with legitimate record access and a phone camera, and it argues for short-rotation supervision and explicit device-capture rules for observers and students.
It also argues for notification discipline: a count that triples under press scrutiny costs more trust than the original mistake.
