How to identify cyber threats

Being aware of suspicious activity including emails, phone calls or text messages and implementing these measures will be key to protecting your information from a cyber-attack.

My Health Record, my health app and Cyber Security

My Health Record and my health app are two safe and secure digital platforms where your key health information can be stored and accessed online at any time, provided you have an internet connection.

Both platforms are run and maintained by the Australian Digital Health Agency on behalf of the Australian Federal Government.

The Australian Digital Health Agency (the Agency) takes online security seriously and are continuously guarding your private information to make sure it is safe.

It is equally important that the owner (you) of the information takes responsibility for looking after your online security.

This fact sheet provides you with information to help you keep on top of your online security.

Who can access information on My Health Record and my health app?

The information stored is available to you, and your healthcare providers at any time, including in an emergency. You have control over your information and can restrict a document and choose which healthcare organisations can view it at any time.

How do I ensure the information in My Health Record and my health app is safe and secure?

  • Use a strong passphrase, and a secret question to access your record.
  • Check your My Health Record access log each time you access your records and report anything that looks suspicious. You can contact the Agency via a number of different methods here: contact us
  • Set strong privacy settings on your accounts, and physical devices.
  • Allow automatic software updates to your devices and applications to make sure they are up to date with the latest security measures.
  • Manually enter your sign in details. Note: The Agency will never contact you to request sign-in details via email or over the phone. If you receive an email or a phone call asking for this information it is a scam.
  • Set up Two-Factor authentication (2FA) where possible. 2FA requires a user to provide their identity in two different ways before granting access to their information. Example:
    1. Enter your password, this will trigger a unique code being sent to your email address or phone number.
    2. Enter the unique code to get access to your account.

How to identify cyber threats

Cybercriminals are always looking to access your information for their own financial gain.

To protect yourself from their malicious tactics, it’s important to stay vigilant and take steps to secure your online activities.

When dealing with personal matters online, the following considerations are important:

  • Do not open attachments or links in emails, text messages or from social media unless you are confident, they are coming from a trusted source.
  • Government departments and other trusted organisations such as your bank will never ask you to share your password or require remote access to your device. If this happens you are likely being scammed, do not respond to a request like this.
  • If you accidentally provide your username and password to a cybercriminal through a scam website or over the phone, immediately attempt to update your username and password and report it to your service provider.
  • Stay up to date with the latest scams by visiting Home | Scamwatch
  • Carefully consider information that you are sharing on social media, as cybercriminals can use information you have publicly posted in their scams and cyber attacks.
  • For more information on cyber security visit Cyber security for digital health privacy
  1. Cybercrime Costs Are Rising Rapidly
    Cybercrime is estimated to have cost the global economy nearly USD 1 trillion in 2020, with a significant portion impacting developed nations like Australia. The average cyber insurance claim rose from USD 145,000 in 2019 to USD 359,000 in 2020, highlighting the growing financial impact of cyber incidents.
    Reference: Cremer, F., Sheehan, B., Fortmann, M., Kia, A. N., Mullins, M., Murphy, F., & Materne, S. (2022). Cyber risk and cybersecurity: A systematic review of data availability. The Geneva Papers on Risk and Insurance – Issues and Practice, 47, 698–736.
  2. Australia’s Cybersecurity Readiness
    Australia ranks highly in the Global Cybersecurity Index (GCI), which evaluates countries based on five pillars: legal, technical, organizational, capacity building, and cooperation. The country’s strong performance reflects its national strategies and investment in cyber resilience.
    Reference: Brüggemann, R., Koppatz, P., Scholl, M., & Schuktomow, R. (2021). Global Cybersecurity Index (GCI) and the role of its 5 pillars. Social Indicators Research.
  3. Data Breach Reporting in Australia
    Under the Notifiable Data Breaches (NDB) scheme, Australia reported over 800 data breaches in 2023, with the majority caused by malicious or criminal attacks. This reflects both the high level of digital engagement and the increasing threat landscape.
    Reference: Office of the Australian Information Commissioner (OAIC). (2024). Notifiable Data Breaches Report: July–December 2023. https://www.oaic.gov.au [Government source, not peer-reviewed]
  4. Healthcare Sector as a Prime Target
    The healthcare sector in Australia remains one of the most targeted industries for cyberattacks, due to the sensitivity and value of patient data. This has prompted increased investment in cybersecurity infrastructure and training across hospitals and clinics.
    Reference: Cremer et al. (2022), as cited above.

Infosheets kindly reviewed by Australian Digital Health Agency