2nd October 2025 Cyber Update: Toowoomba Pharmacy Data Leaked by DragonForce Ransomware

The Update: The DragonForce ransomware group has claimed responsibility for a cyberattack on the Friendlies Society Dispensary in Toowoomba, releasing 35.82 gigabytes of data on the dark web. The September breach exposed patient medical records, vaccination details, NDIS information, and staff payroll files. Some of the data includes names, addresses, treatment histories, and scans of employee identity documents. The pharmacy’s CEO, Bayden Johnson, has acknowledged that the full extent of the breach is not yet known.

In a statement to the ABC, Friendlies Society Dispensary CEO Bayden Johnson confirmed the scope of the breach was still being investigated. “As soon as this incident was detected, we immediately worked to secure our systems and to establish a clear picture of what happened,” Johnson said. “We are working as a priority to determine exactly what information this data contains so we can ensure that all appropriate steps are taken.”

The pharmacy has engaged with multiple government agencies, including the Australian Cyber Security Centre and the Department of Home Affairs. Johnson added that the full extent of the data breach is not yet known.

Why it Matters: This incident underscores how even smaller regional healthcare providers are being targeted by sophisticated cybercriminals. The exposure of sensitive medical and disability records not only risks identity theft and fraud but also poses serious personal consequences for affected individuals, including distress over highly private treatment information being made public.

For the broader sector, this attack is a reminder of the persistent rise of ransomware against healthcare. Former Minister for Home Affairs and Cyber Security Clare O’Neil previously noted that health organisations are among the “most common, and most damaging, targets of cyber attack.” Smaller operators, in particular, often lack the defences of larger hospitals, making them vulnerable points in Australia’s healthcare system.