Employee records exposed in Ambulance Victoria data breach

Employee records exposed in Ambulance Victoria data breach
The breach caused drug and alcohol tests of paramedic graduates to be able to be viewed on Ambulance Victoria’s intranet.

Anthony Anderson
less than 2 min read
May 12, 2023 - 5:24PM
NCA NewsWire
Video Player is loading.
Pause


Unmute
Current Time 0:00
/
Duration 0:00

Fullscreen
Victorian paramedics caught...

Hundreds of paramedics in Victoria have had their private medical information leaked. Employees and job applicants had their data uploaded to Ambulance Victoria's internal website – including 42 spreadsheets detailing pre-employment drug and alcohol testing.
Security
Don't miss out on the headlines from Security. Followed categories will be added to My News.

Follow
Confidential employee information has been exposed in a data breach at Ambulance Victoria (AV).

The data in question is the drug and alcohol tests of prospective graduate paramedics collected between May 2017 and October 2018.

The documents had become accessible on Ambulance Victoria’s internal intranet.

The data breach of 600 records is understood to affect a ‘few hundred’ people. Picture: NCA NewsWire / Luis Enrique Ascui
The data breach of 600 records is understood to affect a ‘few hundred’ people. Picture: NCA NewsWire / Luis Enrique Ascui
“Since becoming aware, AV has removed access to these documents and has undertaken an access audit of these documents,” a spokesperson said in a statement.

“The documents were not directly accessible to anyone outside of the organisation.

“We take privacy very seriously and acknowledge the distress that this may cause. Those affected are being notified and will be provided wellbeing support.”

It’s understood the records, when viewed, only showed the name of the individual and their test results – believed to affect a few hundred people.

More Coverage
Medibank sued over massive data breach
‘Not out of the woods yet’: Tassie won’t pay hackers ransom
AV’s Jane Miller said an investigation had been launched, but as of Friday the organisation was unsure how long the records had been accessible or how the breach occurred.

“What occurred is unacceptable, and we have moved quickly to remove access to that information,” she said.