Icon Oncology Group (Icon Cancer Centre)
LowConfirmedHealthcare
Icon Oncology Group, which operates the Icon Cancer Centre network in Australia, announced on 12 October 2026 unauthorised access to patient information held on a supplier's system. According to trade press, a threat actor allegedly offered more than 31,000 documents for sale on an underground forum. The organisation states these are discrete documents tied to correspondence, not complete patient files. At this stage only Australia appears to be affected. The number of people affected and the precise data types have not been disclosed.
Correspondence documents linked to cancer care could let a malicious third party target patients with credible phishing messages.
- Disclosed on
- October 12, 2026
- Sector
- Healthcare
- Country
- Australia
- Cause
- Third-party provider
Exposed data
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact