Sydney Centre for Ear, Nose & Throat issued an urgent advisory to patients following a successful business email compromise (BEC) campaign. A core administrative email inbox was accessed by threat actors, exposing historical patient consultation bookings and clinical referral correspondence.