NOTICE OF A DATA MATCHING PROGRAM – SERVICES AUSTRALIA AND RX MANAGEMENT PTY LTD CUSTOMERS AFFECTED BY MARCH 2026 DATA BREACH
This notice refers to the commencement of a data matching program by Services Australia using information provided by RX Management Pty Ltd about its customers affected by the March 2026 data breach (Data Breach).
The purpose of this data-matching program is to prevent, detect and address fraud relating to customer’s Centrelink or Medicare details.
The matching agency is Services Australia. The source entity is RX Management Pty Ltd.
Where a government related identifier e.g. Medicare number or Centrelink Reference Number (CRN) was disclosed, or reasonably expected to have been, as part of the Data Breach, the following data, to the extent captured by and available has been disclosed by RX Management Pty Ltd to Services Australia:
- government identifier number
- customer name
- customer date of birth
- customer address
Services Australia will compare the data provided by RX Management Pty Ltd to Medicare program and Centrelink program customer records. This will assist Services Australia identify affected customers deemed compromised and apply proactive security measures to detect and address fraud.
The initial analysis provided by this organisation indicates that there may be approximately 108,957 impacted customers.
A protocol document describing this program is published here:
Data matching activities for third party organisation data breaches - Services Australia
Services Australia adheres to the OAIC Guidelines on data matching in Australian Government administration and the National Health (Data-matching) Principles 2020 (Health Principles), which include standards for data matching activities. Services Australia’s privacy policy is available at:
Privacy Policy - Services Australia