General Practice New Zealand (GPNZ) and Health New Zealand are working together closely as they look to ensure everything possible is being done to manage the impact of a cyber security breach involving patient information held in the ManageMyHealth (MMH) platform.

MMH is a privately operated patient portal used by some general practices to share information with their patients. It reported a potential breach of its systems in the early hours of 31 December 2025, but now states the breach is contained.

MMH has advised that general practices whose patients have been impacted have now been identified, and that individual patients impacted will be notified. We expect MMH to share the timeframe for notifications by Tuesday.

Health NZ is working with primary care providers through GPNZ to clarify the potential impact on patients and general practices.  It has also established an incident management team and has been coordinating advice and support from other government agencies, including the National Cyber Security Centre and the Police Cyber Crime Unit.

‘Unfortunately, malicious cyber activity is a constant threat, and New Zealand is not exempt from this. We expect MMH, and all other providers of health information systems, to meet the highest standards around system security, with patient safety and privacy a top priority,’ says Jason Power, National Director Planning, Funding and Outcomes, Health NZ.

‘We are working with MMH to ensure clear communication to patients and general practices impacted by this breach. We expect assurance that appropriate protections are in place to avoid any repeat and that learning from this incident will be rapidly shared across the health system.’

Health NZ is supporting MMH in legal action it’s taking to protect the information taken in the breach.

GPNZ Chair Bryan Betty says Primary Health Organisations will continue to work with their general practices in the coming days.

“They will be assuring that queries and concerns are able to be addressed and will work alongside MMH and Health NZ to engage and support any patients whose information has been compromised.”

There has been no impact on Health NZ systems or any other patient portals. General practices remain open and providing services, and people can continue to seek care as normal.

MMH has committed to providing regular updates on its website (FAQs - Cyber Breach | Manage My Health (external link)) and directly through its patient app and will be establishing an 0800 number for concerned and impacted people.