Hack of New Zealand's Manage My Health steals medical documents of about 100,000 people
New Zealand patient portal Manage My Health was hacked, and medical documents of about 100,000 people were stolen, with personal health records appearing on the dark web. Notification of affected patients began, but about 47,000 people had no contact details, delaying their notification. The final investigation also identified a personal data handling problem in which hospital records of patients without accounts had been brought into the portal.
Key facts
- Affected organisation
- ManageMyHealth
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Theft of medical documents of about 100,000 people
- Cause / method
- Hack of the patient portal
- Location
- New Zealand
If your data was exposed
Exposed dataHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Personal health records leaked in the hack appeared on the dark web.
- Notification of patients affected by the large-scale leak began.
- The privacy regulator pointed to problems at the portal operator and New Zealand's health authority.
- The privacy commissioner issued warnings to Manage My Health and New Zealand's health authority over the leak.
- The final investigation found that hospital records of patients without accounts had been brought in and that notification was delayed because about 47,000 victims had no contact details.
11 related reports
- $100,000 Manage My Health breach: Two days to tell police, users
- Private health records surface on dark web after Manage My Health hack
- Manage My Health cyberattack puts Wairarapa patient data under scrutiny
- Manage My Health hack: New Zealand's worst cybersecurity incidents
- Who are the hackers behind Manage My Health's cyber attack?
- Manage My Health: Patients start to be notified after massive leak
- Everything you need to know about the Manage My Health hack attack
- Manage My Health data breach: A timeline of what happened, and everything we know so far
- Privacy watchdog faults operator, Health NZ over Manage My Health hack
- Privacy Commissioner puts Manage My Health, Health NZ on notice after data breach
- Manage My Health breached privacy rules by importing hospital records for patients with no account, New Zealand Privacy Commissioner finds
Other incidents at ManageMyHealth
Hack of New Zealand's ManageMyHealth exposes thousands of medical records
Impact: Medical records of thousands of patients exposed
Unauthorised access was confirmed at New Zealand health portal ManageMyHealth, exposing the medical records of thousands of patients. The company implemented measures to contain the breach and launched an investigation with the relevant authorities.
Related reports: 3 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.