11/01/2026
Important information regarding the Manage My Health cybersecurity breach
Dear patients,
We are writing to address the recent cybersecurity incident affecting the Manage My Health (MMH) patient portal. To be clear, MMH is a third-party patient portal service used by our practice. We understand this news is concerning, and we want to provide clarity regarding the safety of your medical records held at our practice.
1. Our Core Patient Management System (Medtech Evolution) is Safe
Please be assured that our internal Practice Management System (Medtech Evolution), where we hold your consultation records, remains completely secure and unaffected. This breach was isolated to the external MMH platform.
2. What data do we share with MMH?
It is important to understand what information we make available via the app.
What is potentially on MMH: We use the portal to share copies of hospital discharge summaries, specialist letters, and diagnostic test results (e.g. blood tests) once we have reviewed and filed them. When we file these documents, they become viewable to you via your MMH patient portal. Essentially, information viewable to yourself via the MMH portal, are shared via the MMH portal.
What is NOT on MMH: We have never uploaded your consultation notes (such as the notes from your GP visits at Central Wellington Medical) to MMH.
3. We strongly advise against deleting your account at this time
If data was accessed, deleting your account now does not remove it from the breach. In addition, deleting your account may prevent MMH from being able to securely notify you if your specific files were involved.
If you have been breached, you will receive a notification email from MMH. If you have not yet received an email, you can login to your MMH account and a green banner may be displayed at the top saying ‘no impact’. If you do not have a green banner, then they haven’t notified you yet. Please be patient and you will get a notification from MMH directly.
4. Impact on Central Wellington Medical
We have received the official data regarding our practice. We can therefore confirm that a very small number (approximately 0.64%) of our enrolled patients have been affected by this breach. Manage My Health is legally required to contact affected individuals directly. If you do not hear from them, it is likely your data was not accessed, but we would advise all users to change their MMH password immediately as a standard precaution measure. We recommend that you remain alert for any suspicious communications and be cautious of unsolicited emails, texts, or phone calls requesting personal information.
Due to the holiday period, we are currently operating on lower staff numbers. We kindly request that patients wait to hear from MMH directly rather than contacting the practice regarding this matter. We need to keep phone lines and email communications open for individuals requiring urgent medical attention. Once MMH has contacted the affected patients, they will inform us and we will be in touch to provide any additional support.
We will continue to monitor the situation closely.
Sincerely,
The Management Team
Central Wellington Medical Centre
