What was exposed, when it happened, and which databases confirm it.
- accounts
- 12,314
- Breached
- May 21, 2021
- Last Update
- May 31, 2022
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In May 2022, the client management system for the Australian government's NDIS (National Disability Insurance Scheme) suffered a data breach which was subsequently posted to an online hacking forum. The CTARS cloud platform is used by care providers to record information about NDIS participants and often contains sensitive medical information. Impacted data includes over 12k unique email addresses, physical addresses, names, dates of birth, phone numbers and data related to patient conditions and treatments.
Compromised Info
- Dates of birth
- Email addresses
- Genders
- Names
- Passwords
- Personal health data
- Phone numbers
- Physical addresses
- Salutations
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the CTARS breach?
The CTARS breach exposed: Dates of birth, Email addresses, Genders, Names, Passwords, Personal health data, Phone numbers, Physical addresses, Salutations, and Usernames.
When did the CTARS breach happen?
The CTARS breach was disclosed on May 21, 2021 and affected 12,314 records.
Am I affected by the CTARS breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the CTARS leak.