← Manage My Health Nz

2026 Manage My Health (NZ) — My Health Documents (Dec 2025 cyber incident)

2026 100.0K records affected Share on X

Data compromised

Uploaded health documents, clinical correspondence in affected subsets; scope varies by user

Technical writeup

Manage My Health (MMH), a widely used New Zealand patient portal (~1.8 million registered users), disclosed a December 2025 cyber security incident involving unauthorised access to the My Health Documents feature—user-uploaded correspondence and some clinical documents, including materials tied to certain Northland hospital workflows in public summaries. MMH stated other systems (GP clinical records, prescriptions, appointments, secure messaging) were not impacted. The company publicly described remediation of the underlying vulnerability, ongoing monitoring, and completion of patient notifications in follow-up updates (including March 2026). FAQ-style reporting cited roughly 5–6% of registered users as in scope (~100,000 individuals at mid-range estimates).

Root cause

Unauthorised access to document storage/feature; vulnerability remediated per disclosure

References