TL;DR: Hackers breached fertility provider Genea on 31 January 2025 and pulled about 940 GB of data on 14 February. The Termite ransomware group published patient data. Genea’s patient management system held contact details, Medicare card numbers, health insurance details, medical histories, test results and medications. Genea says there’s no evidence financial details were taken, and it won a court injunction banning anyone from using or sharing the data. Patients should expect sensitive, targeted scams.
What happened
According to TechCrunch:
- Hackers got into Genea’s Citrix environment on 31 January 2025.
- They extracted about 940 GB on 14 February.
- Termite listed Genea on its leak site and claimed to publish patient data.
- CEO Tim Yeoh confirmed "data taken from our systems has been published externally."
- The MyGenea app was taken offline, per ABC News.
What was in the system
Genea said the compromised patient management system held:
- contact details;
- Medicare card numbers;
- health insurance details;
- medical histories, test results and medications.
Samples seen by TechCrunch appeared to include government ID documents. Genea said there’s no evidence that credit card or bank details were taken. The number of affected patients wasn’t disclosed.
The court injunction
Genea obtained an injunction that bars the attacker and anyone who receives the data from accessing, using, sharing or publishing it. That won’t stop criminals, but it gives legal weight against anyone in Australia who tries to spread it.
Why fertility data is different
Fertility treatment is about as private as health information gets. The danger isn’t just fraud. It’s extortion and emotionally targeted scams: messages that mention treatment, demand payment to "keep it quiet," or pose as the clinic asking for "outstanding fees."
What patients can do
- Never pay extortion demands. Report them to police and ReportCyber at cyber.gov.au.
- Verify clinic contact by calling Genea on a number you look up yourself.
- Use MFA on email and myGov.
- Talk to IDCARE (1800 595 160) for free support.
- If ID documents were exposed, see our guide to passports in breaches.
- If you feel unhappy with how it was handled, see how to complain to the OAIC.
And look after yourself. Having health details exposed can be distressing; it’s reasonable to lean on people you trust.
See also MediSecure and Medibank. A free exposure check shows other breaches tied to your email.
Frequently Asked Questions
When was Genea hacked?
Hackers breached Genea’s systems on 31 January 2025 and extracted data on 14 February 2025.
What data was in the Genea breach?
Genea’s patient management system held contact details, Medicare card numbers, health insurance details, medical histories, test results and medications.
Was financial information stolen from Genea?
Genea said there was no evidence that credit card or bank account details were compromised.
Who was behind the Genea attack?
The Termite ransomware group claimed the attack and published data.