Manage My Health (MMH), New Zealand’s largest patient information portal, has confirmed a cyber security incident involving unauthorized access to its platform. Detected on December 30, 2025, the breach affected the “Health Documents” module, potentially exposing data of up to 126,000 users (6-7% of its 1.8 million registered users). The company has secured the system, notified authorities, and begun user notifications amid calls for stronger digital health protections.
Glimpse:
The breach was limited to health documents; core functions like appointments and prescriptions remain unaffected. Independent forensic analysis confirmed the platform’s security post-remediation. Notifications to affected individuals and GPs are underway, with a helpdesk launching soon. Authorities, including the Privacy Commissioner, Police, and Ministry of Health, are involved, prompting a government review. No impact on Te Whatu Ora systems.
New Zealand’s leading patient portal, Manage My Health (MMH), has disclosed a significant cyber breach that compromised health documents for up to 126,000 users. The incident, identified on December 30, 2025, involved unauthorized access to a specific module, prompting swift containment measures.
MMH, used by millions for accessing records, booking appointments, and managing prescriptions, assured that the breach was isolated: “Appointments and prescriptions in the Health Record function have not been accessed.” The platform was independently verified as secure following remediation, including enhanced login checks and access limits.
Response actions include:
- Re-securing all health documents with upgraded protocols.
- Commencing legal action to safeguard client data.
- Coordinating notifications via primary health organizations and GPs (first tranche sent January 6, 2026).
- Launching an online helpdesk and dedicated support line early next week.
Authorities responded promptly: The Office of the Privacy Commissioner and New Zealand Police were notified, while Te Whatu Ora confirmed no impact on its systems. Health Minister Simeon Brown emphasized high standards for patient data protection, and the Ministry commissioned a review of the breach and response.
This incident follows a pattern of healthcare cyber events in New Zealand, raising broader concerns about digital vulnerabilities in sensitive sectors.
“Patient data is incredibly personal it must be protected to the highest of standards.”
By
HB Team
Related News
