2026 Updoc — third-party system access Jul 31; names/emails/postal addresses (AU notify)
Data compromised
Names, email addresses, and postal addresses (company says no health information, financial information, or payment details; login credentials unaffected)
Technical writeup
Verified company notification — August 5, 2026 Australian press. Telehealth platform Updoc told customers there was a brief period of unauthorized access to a third-party system on July 31, 2026 during which attackers could access names, email addresses, and postal addresses. A company spokesman said Updoc’s own systems were not accessed and that no health information, financial information, or payment details were involved; login/account security remained unaffected. Updoc blocked the access and reported no evidence of further access after the initial event. Attested headcount not published — recordsAffected 0 pending census. Distinct from the separate Partnered Health Australia clinic-network incident earlier in 2026.
Root cause
Brief unauthorized access to a third-party system on July 31, 2026; Updoc states its own systems were not accessed