01/01/2026
We have received the following from Manage My Health regarding their cyber- security incident. We have not been informed if any of our patients MMH accounts have been affected. We will update as soon as we have any further details.
Manage My Health update on cyber security incident
Dear Dr Fowlie,
Manage My Health was notified yesterday of a cyber-security incident involving unauthorised access to its New Zealand application. Since we were alerted, our team has been working very hard to ensure that the application is secure.
We believe the incident has been contained, and we have engaged independent international forensic consultants to further verify the solution we have put in place and determine the extent of the data which is affected.
Based on our investigations to date, we believe between six and seven per cent of the approximately 1.8 million registered users may have been affected by this incident.
We have begun analysis to identify users affected. As you can appreciate, this is a complex exercise, and we expect to start notifying those affected within the next 48 hours.
The Office of the Privacy Commissioner has been notified and is working with us to meet our obligations under privacy legislation
The New Zealand Police have been notified, and Manage My Health is engaging with Health New Zealand and other organisations to coordinate our response.
We recognise that any incident involving health information can cause anxiety and distress. People rightly place a high level of trust in systems that hold their health data, and we understand the concern this situation may create for patients, providers, and partners. We want to thank users and the sector for their patience while a complex investigation continues.
To support patients and providers, we will provide a detailed FAQ to help resolve their questions where possible. To ensure your online security, we strongly recommend you read the guidelines provided by the Own Your Online website https://www.ownyouronline.govt.nz/personal/get-protected/
Vino Ramayah, Chief Executive Officer of Manage My Health, says that Manage My Health takes its obligations to data security seriously.
“We understand how personal and sensitive health information is, and we recognise the stress an incident like this can cause. Our team is working hard to identify those affected, and to communicate directly and transparently,” he says.
Manage My Health will provide a further update at 3pm tomorrow (2 January 2026).
Sincerely
Vino Ramayah
CEO, Manage My Health NZ
Find guidance, tips and advice to help you understand how to protect yourself against common online security threats, and learn how to respond if something happens.
