[News](/news) Intracare data breach: what happened and what's at risk [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Intracare data breach: what happened and what's at risk ##### [UpGuard Team](/team/upguard) March 27, 2026 ### Key facts: Intracare data breach • **Date discovered:** March 20, 2026 • **Date reported:** March 27, 2026 • **Target entity:** Intracare • **Source of breach:** Unknown, unauthorized third-party • **Data types:** Patient records • **Status:** Under investigation; reported on March 27, 2026. • **Severity:** High; exposure of sensitive healthcare records and significant disruption to medical services. ## What happened in the Intracare data breach? Intracare (intracare.co.nz), a private healthcare provider, reported a data breach that was publicly disclosed on March 27, 2026. The incident did not involve a named threat actor at the time of reporting. The breach was identified on March 20, 2026, forcing the organization to take its IT systems offline and defer 28 patient surgeries. Intracare is currently working with cybersecurity firm CyberCX and government agencies to investigate the scope of the incident. The severity is classified as high due to the potential compromise of sensitive patient records and the direct impact on healthcare delivery. Such incidents typically lead to unauthorized access to personal and medical information, which can have long-term consequences for affected individuals. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for Intracare customers For patients of Intracare, the primary risks include the potential exposure of sensitive medical history and personal identifiers. This information could be leveraged by malicious actors for targeted phishing campaigns, identity theft, or medical fraud. The disruption of services, specifically the deferral of surgeries, also presents immediate operational and health-related risks to the affected individuals. Organizations in the healthcare sector often face prolonged recovery times and regulatory scrutiny following such events. Affected patients should monitor their medical billing statements, update account credentials, and remain vigilant against unsolicited communications. Proactive transparency from the provider is essential for mitigating long-term damage and maintaining patient trust. ## How to protect against similar security incidents Following the breach at Intracare involving sensitive patient records, it is critical for affected individuals and healthcare partners to enhance their security posture. • **Monitor medical and financial records.** Regularly review medical billing statements for unauthorized services. Watch for suspicious activity on credit reports or bank statements. Report any discrepancies to your provider and financial institution immediately. • **Implement phishing-resistant MFA.** Enable multi-factor authentication on all healthcare and personal portals. Prefer hardware keys or authenticator apps over SMS-based codes. Be cautious of emails or calls requesting sensitive information. • **Credential rotation and management.** Change passwords for any accounts that may share credentials with healthcare portals. Use a reputable password manager to generate unique, complex passwords. Ensure that no two accounts use the same login information. • **Continuous attack surface monitoring.** Organizations should deploy tools to identify and remediate vulnerabilities in real-time. Ensure all internet-facing assets are patched and secured. Maintain offline backups to ensure business continuity during IT outages. *Maintaining a proactive approach to cybersecurity is the best defense against the evolving threats targeting the healthcare industry.* ## Frequently asked questions ### What happened in the Intracare security breach? On March 27, 2026, Intracare (intracare.co.nz) disclosed a security breach. According to initial reports, the provider experienced a cyber breach leading to IT systems being taken offline and the deferral of 28 patient surgeries while investigating potential impacts on patient records. ### When did the Intracare breach occur? The Intracare breach was publicly reported on March 27, 2026. The exact date of the attack has not been disclosed, though the breach was identified on March 20, 2026. ### What data was exposed? The types of data involved in the Intracare incident have not been disclosed. The company has expressed concern over potential impacts on patient records, and this page will be updated as verified information becomes available. ### Is my personal information at risk? If you interacted with Intracare, there's a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or medical records. Stay alert for updates and take precautionary measures to secure your accounts. ### What steps should companies take after being breached? Intracare has taken steps to secure systems by taking them offline, notified government and health agencies, and is working with CyberCX to investigate the incident and prevent misuse of information. ### Sources [IntraCare Investigating Data Breach](https://www.rnz.co.nz/news/national/590751/private-healthcare-provider-intracare-hit-by-cyber-breach) *This cybersecurity news article is powered by *[*UpGuard Breach Risk*](https://www.upguard.com/product/breach-risk)* — continuous attack surface monitoring for your organisation and supply chain.* ## How secure is ? * View our free preliminary report on ’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View 's score](#) [View score](#) [](#) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)