On 26 February 2025 and 28 February 2025, we posted statements in relation to the cyber incident experienced by Riverina Medical and Dental Aboriginal Corporation (RivMed) this year.
What has happened?
RivMed was recently a victim of a cyber incident recently when an unauthorised person committed a criminal offense and accessed a part of our IT system. As soon as we become aware, we engaged experts to provide us with advice.
The RivMed team have been urgently working to respond to the incident and have taken all steps to protect the privacy of our community members and staff. This includes all possible steps to prevent any accessed information from being published online.
There is no evidence that your personal information has been or will be made publicly available. Our experts are confident that no one in the community will be able to access your information and continue to provide ongoing monitoring.
What have we done?
The RivMed management team and board have worked extensively to respond to the incident and have taken all steps to protect the privacy of our community members and staff.
We assessed what information the unauthorised person may have accessed while inside our IT system, which is now complete. Based on our investigation, we have identified that some personal information about our community members may have been accessed. Importantly, our experts are confident that no data has been published and no one in the community will be able to access your information.
This investigation has revealed that some documents containing personal information may have impacted in the incident. Please note that the type of information differs for individuals based on the type of information we have collected. The different types of personal information impacted includes: basic contact and personal information, identification documents (eg driver licence, passport, birth certificate, Photo ID and international IDs), bank details and other financial information, government identifiers (eg Medicare numbers, Centrelink Reference Numbers and concession card), tax file numbers, health information, information about ethnicity or religion, medical reports, police reports, background checks and employee records.
The RivMed management team and board are committed to supporting our community, members, clients and staff in relation to this incident. A specialist provider, IDCARE, has been engaged to support our community with any responses to questions on the incident and the data potentially impacted.
If you would like to know whether your information has been potentially impacted, please contact our team on support@RivMed.org.au.
What can you do?
In line with expert guidance, you may also consider taking the following steps to mitigate cyber risks and online scams, see below.
Phishing Emails
- Remain vigilant against the risk of phishing emails and scams.
- Do not share your personal information with anyone unless you are confident about who you are sharing it with.
- Scam calls can appear to come from legitimate local numbers, claiming to be from reputable organisations and creating urgency to obtain sensitive information or funds.
- Phishing emails can also appear to come from legitimate email addresses, with minor variations – so always carefully check the email sender address.
Website Guidance
- When on a webpage asking for your login credentials, take note of the web address or URL (‘Uniform Resource Locator’). The URL is located in the address bar of your web browser and typically starts with https://.
- If you are suspicious of the URL, do not provide your login details. Contact the entity through the usual channels to ensure you are logging into the correct web page. Please note that we will never contact you to ask for your username or password or your payment details.
Security
- Ensure you have up-to-date anti-virus software installed on any device you use to access your online accounts.
- monitor your bank statements closely for unusual transactions and advise your bank if you identify anything suspicious.
General Advice
- Guidance for protecting yourself from scams here: Scamwatch.
- Tips on protecting your identity: OAIC Guidance.
- General resources on identity and cyber security support: Cyber Incident Guidance
Next steps
Our staff, members, clients and community’s wellbeing are our highest priority, and we are committed to supporting you in any way we can in relation the incident.
We again sincerely apologise for any concern the incident may have caused you and thank you for your support and patience during this time.
Please contact our dedicated team at support@RivMed.org.au if you have any questions.
Sincerely
RivMed Board and management
