#ManageMyHealth
Gosh I’m glad I found out that the portal that holds my health data may have been breached via the news rather than direct communication from them

ManageMyHealth investigating possible cyber breach www.rnz.co.nz/news/nationa...
ManageMyHealth investigating possible cyber breach
The personal health portal ManageMyHealth is investigating reports of a cyber breach.
www.rnz.co.nz
December 31, 2025 at 1:04 AM
I Was Right About Everything (re: ManageMyHealth):

* API let ANY authenticated user access everyone else's files
* this was dumb and very much subpar

www.health.govt.nz/information-...
May 27, 2026 at 1:28 AM
Text from my GP's practice: they are abandoning ManageMyHealth.
February 20, 2026 at 3:10 AM
Useful context, delivered straight.
#ManageMyHealth
The Manage My Health breach wasn’t a tech failure, it was a policy failure. This column traces how 30 years of privatisation, light-handed regulation and “high-trust” governance left NZ’s most sensitive health data in private hands, with no real oversight: www.democracyproject.org.nz/p/democracy-...
Democracy Briefing: How Privatisation built the MisManageMyHealth disaster
Why don’t we have a single, secure, government-run system for health records?
www.democracyproject.org.nz
January 12, 2026 at 3:56 AM
ManageMyHealth says users should "regularly update their passwords". Yeah mate, that'll help. #TuiBillboard #kikorangi
January 2, 2026 at 5:47 PM
People are having more luck communicating with the ransomers than they are with ManageMyHealth.
January 5, 2026 at 7:56 PM
By using ManageMyHealth, you agreed to the obligation from them to notify them by email if you learn of a security breach related to ManageMyHealth.
The same MMH terms of use also require the *user* to *notify ManageMyHealth" if the learn of a security breach of MMH. You'd think it would be the other way around, but apparently not.

(My support case for notifying them they were breached is CAS-2597956, if anyone wants to reference that 😉)
January 1, 2026 at 12:22 AM
I just got a group ManageMyHealth notification, apparently there's been a Cyber Incident!?! My name is missing from the automated message and there's no information. I have to log in to ManageMyHealth to read a message to find out what's going on 😬
January 6, 2026 at 9:30 PM
PSA says the huge #ManageMyHealth #privacy breach exposes risk of cutting IT experts in public health, 1.8 million NZers may have had private info stolen #nzpol #health www.rnz.co.nz/news/nationa...
PSA says the privacy breach exposes risk of cutting IT experts in public health
The PSA says the ManageMyHealth security breach highlights the risk of cutting IT experts in public health.
www.rnz.co.nz
January 2, 2026 at 8:55 PM
if the ManageMyHealth hackers got my data I hope they know they’re sitting on a goldmine
December 31, 2025 at 8:58 PM
utf9k.net Marcus @utf9k.net · Dec 31
fyi.org.nz/request/2638...

> Around five years ago or so, the Ministry of Health undertook security reviews of general practice systems, which may have included Medtech and ManageMyHealth (MMH). Health NZ does not have access to these reviews.

Might be fun to OIA but probably outdated by now
fyi.org.nz
December 31, 2025 at 5:43 AM
MediMap just as bad as ManageMyHealth then. Thought so.
I'm not sure where this ended up.

Christchurch High Court says they have no records of it, Wellington redirected me to Christchurch (referring me to High Court rules) and I haven't heard back from Auckland

MediMap said they got granted an injunction on Saturday

help.medimap.health/hc/en-au/art...
March 2, 2026 at 5:47 AM
Make no mistale if this had happened when Labour was in Power, Simeon woud be calling for heads (Ministers) to roll

www.rnz.co.nz/news/nationa...
ManageMyHealth data breach concerning, but no clinical impact - Health Minister
Simeon Brown says government agencies are working with ManageMyHealth to fully understand the scope of the breach and to protect the privacy of patients.
www.rnz.co.nz
January 2, 2026 at 2:26 AM
The same MMH terms of use also require the *user* to *notify ManageMyHealth" if the learn of a security breach of MMH. You'd think it would be the other way around, but apparently not.

(My support case for notifying them they were breached is CAS-2597956, if anyone wants to reference that 😉)
December 31, 2025 at 11:43 PM
Once again CoC Ministers have 0 idea why people are concerned (or are gaslighting us by deflecting)
Patient privacy is the main issue here little Simeon. Not fukn "clinical impact"

#nzpol
ManageMyHealth data breach concerning, but no clinical impact - Health Minister
Simeon Brown says government agencies are working with ManageMyHealth to fully understand the scope of the breach and to protect the privacy of patients.
www.rnz.co.nz
January 1, 2026 at 9:01 PM
Something, something, stable, something, door, something, horse bolted
#nzpol
Government orders review of ManageMyHealth data breach as hackers’ deadline looms
Health Minister Simeon Brown has commissioned the Ministry of Health to review the response to the ManageMyHealth cyber security breach involving patient information.
www.stuff.co.nz
January 5, 2026 at 1:18 AM
I work in this field.
Brown is a dick.
Brown is incompetent.
Brown is trying to to get ManageMyHealth off the hook by pretending network security is a new & surprising thing.
It’s not.

Fact: ManageMyHealth were charging $$ to keep your data SECURE. They failed. They are 100% culpable.

#nzpol
I hate this from Brown. A ‘wake up call’ implies this is something new or unforeseen when in reality it is not and any entity, public or private, holding such sensitive data, should have prioritised not just security but regular security testing/auditing as a necessary cost of business.
January 4, 2026 at 11:24 PM
At last, an email from my medical centre about the data breach. Except it’s to inform me there is a group message which I can only read on… Manage My Health.
a man is standing in front of a building and smoking a cigarette .
Alt: A man crying with text that reads “I want to be a nice person but everyone is just so stupid!”
media.tenor.com
January 8, 2026 at 11:25 AM
I hope an infosec reporter here is digging into this one like a fat ham because it's juicy. So tempting. www.reddit.com/r/newzealand...
ManageMyHealth Compromised
www.reddit.com
December 31, 2025 at 6:21 AM
They’ve just dropped an in-app notification
December 31, 2025 at 1:44 AM
Looks like someone finally made Simeon realise how serious this is. None of the "no impact on clinical matters, so all good, mate" attitude here.

Government orders review into ManageMyHealth data breach www.rnz.co.nz/news/nationa...
Government orders review into ManageMyHealth data breach
Hackers say they will release up to 400,000 stolen patient documents if ManageMyHealth doesn't pay.
www.rnz.co.nz
January 4, 2026 at 10:50 PM
Kazu, the group/individual behind the ManageMyHealth breach, has posted some samples of the data for verification and they all appear to be legitimate.

Among other things, there are test results (ie; Labtests), referral letters, patient health summaries, hospital ED summaries and other letters
December 31, 2025 at 4:34 AM