ManageMyHealth Data Breach: Minister Reassures No Clinical Impact Despite “Concerning” Leak

By Lions Roar News National Desk

WELLINGTON, NEW ZEALAND (January 2, 2026) — New Zealand Health Minister Simeon Brown has moved to reassure the public following a significant data breach at ManageMyHealth, the country’s largest patient information portal. While describing the incident as “concerning,” the Minister confirmed today that there has been no clinical impact on patient care or the delivery of health services.

The breach, which was first identified on Wednesday (December 31, 2025), involves unauthorized access to the platform used by approximately 1.8 million New Zealanders to access their medical records and book appointments.

📉 The Scope: 126,000 Users Potentially Affected

ManageMyHealth has revealed that between 6% and 7% of its registered user base—potentially up to 126,000 people—may have had their data compromised.

Key Details of the Incident:

• Ransom Demand: A cybercrime group (reportedly the group ‘Kazu’) has claimed responsibility, demanding a $60,000 ransom by January 15. They claim to have stolen 108GB of data, totaling over 400,000 files.
• Encryption Concerns: Cyber security experts have criticized the platform for allegedly using outdated encryption protocols (TLS 1.2), calling the breach “catastrophic” on a local scale.
• Containment: CEO Vino Ramayah stated the incident has been “contained” and that international forensic consultants are currently investigating the extent of the data loss.

🏛️ Government and Clinical Response

Minister Simeon Brown emphasized that Health New Zealand (HNZ) systems, such as the “My Health Account,” remain secure as they operate on separate infrastructure from ManageMyHealth.

“This is a concerning breach of patient data. I expect a coordinated and robust response to ensure patient privacy is protected and given the highest priority,” Minister Brown stated.

Stakeholder Reactions:

• Office of the Privacy Commissioner: Working with the portal to begin the complex process of notifying affected individuals, expected to start within the next 48 hours.
• Dr. Ayesha Verrall (Labour): Criticized the delay in direct communication, stating that users have “every right to be concerned” about the safety of their most sensitive information.
• GPs and Doctors: The Royal New Zealand College of General Practitioners expressed disappointment, noting that many doctors only learned of the breach through media reports during the busy New Year holiday period.