A business email compromise (BEC) campaign targeted a prominent Brisbane medical center. Threat actors hijacked an administrative email account, granting unauthorized access to clinical appointment schedules, Medicare billing markers, and contact details for 5,000 patients.