Introduction Australia’s healthcare sector is failing at cybersecurity. The latest MediSecure breach, compromising the data of 12.9 million Australians, isn’t an isolated incident—it’s a symptom of a much larger, systemic problem. The industry’s outdated, compliance-driven approach to security is not working. Without a fundamental shift towards data-centric protection, healthcare providers will continue to be sitting ducks for cybercriminals. The reality is stark: healthcare organisations are among the most targeted industries for cyberattacks, and yet many are still relying on security frameworks designed for a different era. While digital transformation has improved patient care and operational efficiency,...