Dear Patients,
We are writing to inform you of a recent security incident involving our reception email account (admin@doctorsofnorthcote.com).
On 19 March 2026, this account was compromised by an unauthorized party. This resulted in a number of emails being sent from this account containing a link to a file hosted on SharePoint/OneDrive. These emails were not legitimate and should be treated as malicious.
Screenshot:
What you should do:
- Please delete the email immediately and do not click on any links or download any attachments.
- If you have already clicked the link or entered your credentials, we strongly recommend that you reset your password immediately and enable Multi-Factor Authentication (MFA) where possible.
- If the same password is used across other services, please update those as well.
What we know:
- Emails were sent only to contacts stored in the reception mailbox, which may include patients and other external contacts.
- Based on our investigation, we do not believe any personal or sensitive information has been accessed, exfiltrated, or compromised.
- The incident was identified and contained promptly, and the unauthorized access has been fully removed.
What we have done:
- Secured the affected account and reset credentials
- Removed all malicious content and access created by the attacker
- Conducted a full investigation into the incident
- Implemented additional security measures to prevent recurrence, including stronger authentication controls
We understand that incidents like this can be concerning. Please be assured that we take the privacy and security of your information very seriously and have taken all necessary steps to address this matter and strengthen our protections moving forward.
If you have any questions or concerns, please do not hesitate to contact us.