PME Response to speculation

• Single email inbox accessed by unknown third party in July 2025
• No access to client systems or patient data, no financial loss or operational impact
• Personal data of around 100 employees potentially accessed, all notified

Pro Medicus Limited (ASX: PME) has responded to speculation regarding a data breach relating to its Visage Imaging subsidiary. The company confirms that it investigated an incident of unauthorized access to a single email inbox by an unknown third party in July 2025. Upon becoming aware of the incident, Pro Medicus promptly engaged external cybersecurity experts, secured the inbox, and contained the incident. A comprehensive analysis found that the unauthorized access was isolated to a single mailbox, with no access to any client systems or patient data. Apart from this single inbox, no Pro Medicus systems, products, or databases were accessed or affected. The company did not incur any financial loss or operational impact. The analysis found that Personally Identifiable Information (PII) for approximately 100 current and former Pro Medicus employees could potentially have been accessed. Pro Medicus has notified all of these individuals to inform them of the potential access to their personal data. The analysis found no evidence of any other PII being exposed. Based on the findings, Pro Medicus does not believe that any material or commercially sensitive information was accessed. The company has notified all applicable governmental authorities in accordance with relevant laws and regulations.