Victorian healthcare provider SIA Medical Centre launched a forensic investigation after being listed on the dark web extortion portal of the Rhysida ransomware cartel. Threat actors claim to have exfiltrated thousands of patient and clinical files from internal network directories, releasing sample files to pressure the organization. SIA Medical Centre confirmed it is responding to a active cyber incident involving patient records, engaging external cybersecurity specialists and notifying relevant regulatory authorities while conducting forensic assessments to establish the extent of data exposure.