> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Ochre Health Data Breach: 25K+ Patients' Medical Records for Sale
- URL: https://darkwebinformer.com/ochre-health-data-breach-25k-patients-medical-records-for-sale/
- Published: 2026-06-09T15:21:10.000Z
- Updated: 2026-06-09T15:21:10.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![Australia flag](https://flagcdn.com/w40/au.png)Australia Healthcare 

## Ochre Health Data Breach: 25K+ Patients' Medical Records for Sale

A threat actor using the alias **2019** claims to be selling a patient database stolen from **Ochre Health**, an Australian medical-centre network providing general practice and allied health services. The post advertises **25,000+ patients and 700,000+ records** with highly sensitive medical and identity data, including names, dates of birth, contact details, **Medicare and DVA numbers**, appointment histories, and payment information. It is offered as a one-time sale in cryptocurrency. The claim is **unverified** and Ochre Health has not publicly addressed it.

Severity CRITICAL 

Data25K patients / 700K records

PriceOne-time sale (crypto)

Country![Australia flag](https://flagcdn.com/w40/au.png)Australia

Actor2019

### ▣Post details

TargetOchre Health (medical-centre network)

Country![Australia flag](https://flagcdn.com/w40/au.png)Australia

SectorHealthcare

ClaimPatient database offered for sale

Data25K+ patients, 700K+ records (medical)

ObservedJun 9, 2026

PriceOne-time sale (BTC/ETH/XMR)

Actor2019 (GOD user)

### !Allegedly exposed

- 25K+ patients / 700K+ records (claimed)
- Patient names & dates of birth
- Mobile, home phone & email
- Home address, suburb & postcode
- Medicare numbers, refs & expiry
- DVA (veterans' affairs) numbers
- Appointment & treating-doctor details
- Payment & billing information

### ◱Screenshot

[ ![Ochre Health Australia alleged data leak Screenshot 1](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/57628387962358975626398766489723987.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/57628387962358975626398766489723987.png) 

### ⚠Potential impact

If genuine, this is an especially serious exposure: a healthcare dataset linking **25,000+ patients** to dates of birth, contact details, **Medicare and DVA numbers**, appointment histories, and treating doctors. Medicare and DVA numbers are sensitive Australian health identifiers that can enable Medicare fraud, identity theft, and highly convincing medical-themed scams, and the health context itself makes any exposure particularly harmful to patients. Health data is among the most damaging information to leak. Record counts and authenticity are unconfirmed.

### iStatus

Unverified 

Column listings across three tables and sample patient records were posted to an underground forum, offered as a one-time cryptocurrency sale via Session and TOX contacts; the sample records and contact identifiers are not reproduced here. The claim has **not been independently confirmed** and Ochre Health has not publicly addressed it.

Want the non-redacted screenshots? **Paid subscribers** get all of the claim details and unredacted screenshots. Check out the [threat feed](https://darkwebinformer.com/threat-feed/) or [ransomware feed](https://darkwebinformer.com/ransomware-feed/) (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE