Power Diary email system breached, causing phishing/spam emails to patients
Learn More
Power Diary, an Australian practice management software company, experienced an email breach that led to patients receiving phishing emails mimicking their healthcare providers.
An unauthorized party gained access to Power Diary’s email-sending feature, exploiting its communication template system to send spam emails that appeared to be from the patients' GP practices. The phishing emails falsely informed recipients of winning a non-fungible token (NFT) and cryptocurrency award, urging them to click on a link to claim the prize.
Power Diary claims that no client data, including patient personal information or email addresses, was accessed by the hackers. Since emails were sent, it's quite possible that at least email addresses are stolen.
The number of affected individuals and the nature of the attack is not disclosed.
The company notified all affected practices by email on 26 August and identified the specific endpoint accessed by the hackers. Additional security measures are being implemented to prevent further unauthorized access.
