EBR Systems

Summary

EBR Systems reported a cybersecurity incident that may have led to unauthorized access to a limited amount of personal health information. The company engaged third‑party forensics experts, notified affected patients, and posted details on its website while noting that operations were not materially disrupted and financial impact is not expected.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

EBR Systems, an Australian medical technology firm, announced on April 15, 2026 that a cybersecurity incident first detected in February may have led to unauthorized access to a limited amount of personal health information. The company said it became aware of a network disruption around February 13 that affected certain internal systems. This disruption prompted EBR Systems to launch an investigation with the help of third‑party computer forensics specialists. The firm also stated that it was required to notify affected patients and to post details of the incident on its website.

The ongoing review conducted by the forensics team found that certain information stored on EBR Systems’ network had been subject to unauthorized access. The company emphasized that its assessment remains ongoing and that, based on the samples examined so far, the volume of data involved appears to be limited. EBR Systems noted that the incident did not cause any material disruption to its day‑to‑day operations. It also said that the breach is not expected to have a material impact on its financial results.

EBR Systems highlighted that it holds cybersecurity insurance coverage that is intended to pay for costs associated with the breach. The incident was cited as an example of Australia’s increasing exposure to cybersecurity threats, reflecting a broader trend of rising data breaches and ransomware attacks across healthcare, financial and government sectors over the past five years. By providing timely patient notifications and maintaining transparency through its website, the firm sought to meet its regulatory and contractual obligations following the detected security event.

Sources

Sources available to members: 1 source.