ICON Oncology Group, operator of Icon Cancer Centre and described as Australia’s largest cancer care provider, has disclosed a data breach affecting patient information held on a supplier’s system. In a notification dated 12 October 2026, the group said there had been unauthorised access to data on a third‑party system, indicating that patient records stored with a supplier were compromised rather than directly within Icon’s own networks.
The announcement does not specify which types of patient information were accessed or the extent of the impact. It attributes the incident to unauthorised access on a supplier’s platform and notes that patient data was affected as a result. The article reporting this breach emphasises that Icon Oncology Group is managing the situation and urging awareness of the breach’s effects on patients. No further technical details, CVE identifiers, or concrete remediation steps are provided in the material.