A quick update to let you know our team is continuing to investigate this issue. We are also compiling a list of all accounts impacted and will be emailing each one directly.

Clarification of unauthorized activity:

We want to provide a clear explanation regarding the nature of unauthorized email activity. It’s important to emphasize that the unauthorized party was only able to trigger the sending of emails—they did not, and do not have access to any of the personal information of your patients.

To help illustrate this, imagine a mail merge process. The unauthorized party was able to create the content of the email, similar to filling out a template, but they could not see any of the email addresses the messages were sent to, nor could they view any of the personal details (like patient names) that were automatically inserted by our system. They were essentially only able to “press send” without knowing who was receiving the emails or what specific information was included.

Importantly, we want to assure you that we have multiple safeguards in place to protect the personal information that we manage. Whilst it is extremely disappointing that an unauthorized party was able to send these emails, the security mechanisms we have in place to protect information access were not breached, and no personal information has been exposed to any third party.

Dedicated information pages:

Finally, as previously mentioned, we have created a dedicated page that you can share with your patients, as well as a summary page for practices that consolidates all the information known about this incident.

We understand the seriousness of this situation and are continuing our work to ensure the security of our platform. We appreciate your ongoing patience and understanding.

Power Diary - Get updates by email

Get updates for this notice

Spam Emails Sent