NOTICE OF A DATA MATCHING PROGRAM – SERVICES AUSTRALIA AND SPECTRUM MEDICAL IMAGING PTY LIMITED CUSTOMERS AFFECTED BY NOVEMBER 2024 DATA BREACH
This notice refers to the commencement of a data matching program by Services Australia using information provided by Spectrum Medical Imaging Pty Limited about its customers affected by the November 2024 data breach (Data Breach).
The purpose of this data-matching program is to prevent, detect and address fraud relating to customer’s Centrelink or Medicare details.
The matching agency is Services Australia. The source entity is Spectrum Medical Imaging Pty Limited
Where a government related identifier e.g. Medicare number or Centrelink Reference Number (CRN) was disclosed, or reasonably expected to have been, as part of the Data Breach, the following data, to the extent captured by and available has been disclosed by Spectrum Medical Imaging Pty Limited to Services Australia:
- government related identifier
- customer name
- customer date of birth
- customer address
Services Australia will compare the data provided by Spectrum Medical Imaging Pty Limited to Medicare program customer records. This will assist Services Australia identify affected customers deemed compromised and apply proactive security measures to detect and address fraud.
The initial analysis provided by this organisation indicates that there may be approximately 6,144 impacted customers.
A protocol document describing this program is published here:
Data matching activities for third party organisation data breaches - Services Australia
Services Australia adheres to the OAIC Guidelines on data matching in Australian Government administration and the National Health (Data-matching) Principles 2020 (Health Principles), which include standards for data matching activities. Services Australia’s privacy policy is available at:
Privacy Policy - Services Australia