Incident

DragonForce Ransomware gang leaks data allegedly stolen from Toowoomba Friendlies Society Dispensary


Learn More

DragonForce cybercriminal group claims to have breached Toowoomba Friendlies Society Dispensary, a community-owned Queensland healthcare organization and registered National Disability Insurance Scheme (NDIS) provider.

Toowoomba Friendlies Society Dispensary operates as a community-owned organization that has served the region since 1897, providing pharmacy services, mobility supplies, home modifications, vaccinations, and delivery services. As a registered NDIS provider, the organization maintains records of disability services participants and their personal health information. 

The hackers listed the Toowoomba-based healthcare provider as a victim on its dark web leak site and published the 35.82 gigabytes allegedly stolen dataset. Exposed data includes:

  • Patient names, addresses, and photographs
  • Detailed medical treatment records and prescriptions, including methadone treatment and emergency contraceptive prescriptions
  • Vaccination lists and immunization records
  • NDIS participant information and disability service details
  • Financial documents and billing records
  • Staff payroll information and employment records
  • Medicare card scans and driver's license copies of employees
  • Patient identification documents and government-issued credentials
  • Counterparty and business partner information

The number of affected individuals is not disclosed. 

Toowoomba Friendlies Society Dispensary has not yet issued a public statement regarding the incident.

DragonForce Ransomware gang leaks data allegedly stolen from Toowoomba Friendlies Society Dispensary