Phi Finney McDonald has lodged a representative complaint with the Office of the Australian Information Commissioner (OAIC) against Genea Pty Ltd (Genea) in relation to the data breach that occurred in early 2025.
Background
Genea provides IVF treatment services, genetic testing, egg and sperm freezing and fertility testing. Genea operates 19 fertility clinics across Australia, and a clinic in Thailand.
On 19 February 2025, Genea informed patients via social media that there had been suspicious activity on its network. Genea subsequently confirmed that patient data had been accessed and published on the dark web.
In July 2025, Genea directly contacted impacted individuals to confirm their data had been affected.
On 20 October 2025, we were instructed by an individual affected by the data breach to make a representative complaint to OAIC, pursuant to s 38(2) of the Privacy Act 1988 (Cth).
What is a representative complaint?
A representative complaint can be made by an individual on behalf of two or more people against the same respondent where an act or practice may have interfered with their privacy.
How do I register for the representative complaint?
There is no requirement to register to participate in the representative complaint at this time. However, if you have been affected by the data breach and you would like to receive updates, you may register your interest in receiving updates here.
Please note, all personal information collected by Phi Finney McDonald through the registration process will be kept confidential and private.
Do I have to pay to register?
No. It does not cost anything to register.
You will not have to pay Phi Finney McDonald’s legal costs out of your own pocket. In the event of a successful outcome, any costs payable to Phi Finney McDonald will be sought to be deducted from, and will not exceed, any compensation you are entitled to.
Resources regarding identity theft and protecting yourself from scams: