100,000 documents stolen from an isolated NSW Health server, leading to a major incident declaration and police investigation.

What it means

A hacker (reportedly based in the United States) has stolen roughly 100,000 sensitive documents (about 70GB) from an isolated server at NSW Health, the public health system of New South Wales, Australia. Cyber Security NSW has confirmed a 'limited breach' that it says did not affect patient data, but the stolen files contained other sensitive information. The incident has been declared a major incident, and a police investigation is underway. The affected server was isolated from the main network, which likely limited the overall exposure.

Accuracy & sourcesGrounded

The claim is well-supported by official statements from Cyber Security NSW and NSW Police, as reported across multiple reputable Australian outlets (ABC News, Sydney Morning Herald, WAtoday, 7NEWS). The number 100,000 documents comes from the hacker's claim, reported as 'pending verification' by Hackmanac, but the breach itself is confirmed. Media reports are consistent and cite the same primary sources, making the core claim solid while the exact scope remains under investigation.

How new

Genuinely new: this story broke on 3–4 November 2026 and is still developing; it is not a resurfacing of older material.

Go deeper