To be attributed to Health New Zealand | Te Whatu Ora Acting National Director, Planning, Funding & Outcomes Jason Power

Health New Zealand continues to work closely with ManageMyHealth (MMH) and a range of government agencies to ensure all appropriate steps are being taken to manage a cyber security breach involving patient information.

MMH, the target of the security breach, is a privately operated patient portal used by some primary care providers and is responsible for managing and securing its systems.

Health NZ takes any issue involving patient information very seriously and has activated its own incident management team.  We are working with relevant agencies, including the National Cyber Security Centre and the Police Cyber Crime Unit, to ensure the situation is being managed appropriately.

We are also utilising independent cyber specialist capability to provide further assurance that the vulnerabilities that led to the breach have been addressed.

We expect MMH to meet clear standards around system security, transparency, and communication with users. Health NZ will continue to monitor progress closely and maintain active engagement with MMH and partner agencies.

Health NZ is speaking with primary care organisations and GPs who use the service. There is a shared focus on patient safety, clear communication, and ensuring appropriate protections are in place.

There has been no impact on Health NZ systems.