Manage My Health has confirmed that a recent cyber security incident was limited to a single part of its system, with independent forensic specialists finding the wider platform is now secure and operating as intended.
The company said the breach affected only the Health Documents module, not the entire app, following unauthorised access detected in late December.
Ongoing forensic analysis has identified that around 6 to 7 percent of the platform’s approximately 1.8 million registered users may have had documents accessed. Manage My Health says it now has a complete list of people potentially affected and expects to receive confirmation of the specific documents involved in the coming days.
Once final verification steps are completed, the company plans to begin notifying affected users directly from early next week. It says this process will be carried out in coordination with primary health organisations and general practices to ensure people receive accurate information and appropriate support, in line with Privacy Act requirements.
Additional safeguards have been introduced, including stronger login checks, limits on repeated access attempts, and enhanced security for stored health documents.
Manage My Health has also begun legal action in response to the breach.
Users are being encouraged to reset their passwords and enable two-factor authentication where available. Instructions for setting up two-factor authentication can be found here.
The company has also advised people to remain alert for any unusual activity, such as unexpected medical bills, insurance claims, or communications from healthcare providers they do not recognise, and to report anything suspicious to the appropriate authorities.
The company says it will provide further updates as soon as new information becomes available, adding that transparency, system security, and user support remain its priorities.
Daily Telegraph New Zealand (DTNZ) is an independent news website, first published in October 2021. - where this article was sourced.
Once final verification steps are completed, the company plans to begin notifying affected users directly from early next week. It says this process will be carried out in coordination with primary health organisations and general practices to ensure people receive accurate information and appropriate support, in line with Privacy Act requirements.
Additional safeguards have been introduced, including stronger login checks, limits on repeated access attempts, and enhanced security for stored health documents.
Manage My Health has also begun legal action in response to the breach.
Users are being encouraged to reset their passwords and enable two-factor authentication where available. Instructions for setting up two-factor authentication can be found here.
The company has also advised people to remain alert for any unusual activity, such as unexpected medical bills, insurance claims, or communications from healthcare providers they do not recognise, and to report anything suspicious to the appropriate authorities.
The company says it will provide further updates as soon as new information becomes available, adding that transparency, system security, and user support remain its priorities.
Daily Telegraph New Zealand (DTNZ) is an independent news website, first published in October 2021. - where this article was sourced.

1 comment:
And the government is going to run a safe digital ID system. Yeah right Judith
Post a Comment
Thank you for joining the discussion. Breaking Views welcomes respectful contributions that enrich the debate. Please ensure your comments are not defamatory, derogatory or disruptive. We appreciate your cooperation.