The Office of the Privacy Commissioner of New Zealand has issued a statement regarding a serious cyber incident that has affected the Manage My Health patient portal service. On January 1, 2026, Manage My Health notified the authorities that ransom hackers had accessed and downloaded sensitive health information of thousands of its users, including files such as correspondence, hospital discharge summaries, and referral letters from between 2017 and 2019.
Manage My Health is working with Health New Zealand and affected healthcare providers to directly notify impacted users by email and provide them with instructions on how to log in to the portal to check if their information has been affected. Users can also call a dedicated 0800 helpline set up by Manage My Health to access identity and cyber support services, as well as medical advice, all of which are free and confidential.
The Privacy Commissioner of New Zealand advises affected individuals to take immediate steps to secure their personal information, as hackers and scammers may attempt to use the stolen data to gain unauthorised access to accounts or perpetrate other scams. Users can also file a privacy complaint with Manage My Health and their healthcare provider if they believe they have experienced actual or potential privacy harm due to this data breach. The Privacy Commissioner’s office is available to assist with the complaint process.