The ransomware group known as The Gentlemen has once again proven it is anything but after targeting a Victorian medical group.Epichealth was listed by the hackers in an October 31 leak post, and while no data has yet been published, the post says publication will occur in the next 24 hours.
You’re out of free articles for this month
The Gentlemen has not shared any further details of the incident; however, an Epichealth spokesperson has confirmed it is responding to a cyber security incident.
“Epichealth recently experienced a cyber incident, during which an unauthorised third party accessed part of our IT systems,” the spokesperson told Cyber Daily.
“When we became aware of the incident, we engaged independent cyber security experts to investigate what happened and provide advice. We took immediate steps to contain the incident and to safely restore our systems.”
Epichealth’s several clinics remain open, however, and care is still being provided to patients.
“Our investigation has identified that some personal information held in our systems may have been accessed,” Epichealth said.
“Work to establish the nature and extent of the information involved is continuing. We have published a notice for patients on our website setting out the information that may be involved, and the steps individuals can take to protect their personal information.
“Epichealth does not typically collect copies of patient identity documents, and does not hold patient bank or credit card details.”
According to the website update, the following data has been compromised:
basic personal and contact details (name, date of birth, email address, phone number and/or address);
Medicare card number;
Centrelink customer reference number (CRN)
Veteran card (DVA) number; and
health information
The Office of the Australian Information Commissioner and the Australian Cyber Security Centre have been informed, and Epichealth said it “will continue to assess any further notification obligations as our investigation continues.”
“We sincerely apologise for any distress or uncertainty this incident has caused,” the spokesperson added.
“Protecting the information entrusted to us is a responsibility we take very seriously, and we are doing everything possible to support our patients, our practitioners and our staff.”
Who is The Gentlemen?
The Gentlemen appeared on the ransomware scene in September 2025; since then, the group has risen to the number two spot in terms of victim count, behind only the Qilin ransomware-as-a-service operation.
The Gentlemen is thought to be made up of Russian speakers and operates under a similar model to Qilin – affiliates keep 90 per cent of any ransom paid, with the rest going to The Gentlemen in return for using its infrastructure.
The Gentlemen’s most recent Australian victim was the Campbelltown Anglican Schools Council, which confirmed it was responding to an incident last month.
Who is Epichealth
Epichealth Medical Clinics operate two clinics in the Victorian town of Ocean Grove, one in Portarlington, and an urgent care clinic in Warrnambool.
——————————————————–
Click Here For The Original Source.
