Cybersecurity Breach at Canopy Health Exposes Patient Data, Delayed Notifications Raise Concerns Canopy Health, Australia’s largest private medical oncology provider, disclosed a cyberattack on July 18, 2025, after detecting unauthorized access to an administrative server. A forensic review confirmed that data may have been copied, though the incident was contained. The breach potentially exposed a limited number of bank account details provided for payments or refunds, though the company stated the risk of misuse was low. Despite the July discovery, some patients—including one whose wife received a notification letter on December 12—reported learning of the breach months later. This incident follows another major health data breach involving ManageMyHealth, a patient data platform. In late December, the company confirmed unauthorized access affecting 6–7% of its 1.8 million users. Over 125,000 patients were impacted, with more than 80,000 in Northland, where Health NZ relies on the platform for sharing sensitive medical records, including discharge summaries and clinic letters. ManageMyHealth stated that independent IT experts had verified fixes to the vulnerabilities, and over half of affected users had been notified by mid-January. Both breaches highlight ongoing risks to healthcare data security and the challenges of timely breach disclosures. Investigations remain ongoing.