2026 MediMap — credential theft, patient data modified
Data compromised
Patient records modified; names, DOB, prescriber assignments, care locations, status fields
Technical writeup
MediMap NZ health portal (aged care, disability, hospice, community health) compromised Feb 22, 2026. Hacker stole user login credentials to access system; no software vulnerability. Modified patient records: names, DOB, prescribers, care locations, status. Some residents falsely marked deceased; names replaced with politicians/media figures. Platform taken offline; facilities reverted to manual medication admin. Court injunction sought.
Root cause
Credential theft; legitimate user account compromised