The NCSC's 2026 Cyber Report has a small factoid about the ManageMyHealth hack that I don't think was public before:
> These [valid user] credentials had been stolen through a malware infection known as Lumma Stealer.
www.ncsc.govt.nz/assets/insig...
> These [valid user] credentials had been stolen through a malware infection known as Lumma Stealer.
www.ncsc.govt.nz/assets/insig...
www.ncsc.govt.nz
September 23, 2026 at 10:43 PM
The NCSC's 2026 Cyber Report has a small factoid about the ManageMyHealth hack that I don't think was public before:
> These [valid user] credentials had been stolen through a malware infection known as Lumma Stealer.
www.ncsc.govt.nz/assets/insig...
> These [valid user] credentials had been stolen through a malware infection known as Lumma Stealer.
www.ncsc.govt.nz/assets/insig...
Whoever works on the managemyhealth website is a fucking clown, their ceo is poison. Their service is hostile as fuck for exporting YOUR OWN RECORDS. their "csvs" are just corrupted mscsvs. Their PDFs are garbo.
I want managemyhealth to go bankrupt. It's my birthday wish. 🙏
I want managemyhealth to go bankrupt. It's my birthday wish. 🙏
September 23, 2026 at 3:57 AM
Whoever works on the managemyhealth website is a fucking clown, their ceo is poison. Their service is hostile as fuck for exporting YOUR OWN RECORDS. their "csvs" are just corrupted mscsvs. Their PDFs are garbo.
I want managemyhealth to go bankrupt. It's my birthday wish. 🙏
I want managemyhealth to go bankrupt. It's my birthday wish. 🙏
My GP's are no longer using ManageMyHealth which is nice. Except in telling me that they're no longer using managemyhealth they neglected to tell me where to make new appointments or order my drugs.
September 22, 2026 at 9:51 PM
My GP's are no longer using ManageMyHealth which is nice. Except in telling me that they're no longer using managemyhealth they neglected to tell me where to make new appointments or order my drugs.
Two compounding issues are my GP quit and my digital records have been archived off line by the practice because of the ManageMyHealth hacking fiasco.
September 14, 2026 at 3:54 AM
Two compounding issues are my GP quit and my digital records have been archived off line by the practice because of the ManageMyHealth hacking fiasco.
the national one in NZ had a data breach serious enough that it's got its own wiki page 🤡
ManageMyHealth data breach - Wikipedia
en.wikipedia.org
August 5, 2026 at 5:50 AM
the national one in NZ had a data breach serious enough that it's got its own wiki page 🤡
Anyone else getting multiple emails from ManageMyHealth, saying you've got new lab results? I've had about 15 emails in the last 24 hours. Doesn't seem scammy, just glitchy as all hell.
June 9, 2026 at 10:22 PM
Anyone else getting multiple emails from ManageMyHealth, saying you've got new lab results? I've had about 15 emails in the last 24 hours. Doesn't seem scammy, just glitchy as all hell.
nationalise private parasitic digital health services, managemyhealth shouldn't be managing deez nuts. tho they can go suck them.
it's a fucking website with auth and a sql db. if you wanna make jobs a priority pay some cnut to make a website for the nz ppl. then pay them to secure it on the reg.
it's a fucking website with auth and a sql db. if you wanna make jobs a priority pay some cnut to make a website for the nz ppl. then pay them to secure it on the reg.
May 27, 2026 at 6:39 AM
nationalise private parasitic digital health services, managemyhealth shouldn't be managing deez nuts. tho they can go suck them.
it's a fucking website with auth and a sql db. if you wanna make jobs a priority pay some cnut to make a website for the nz ppl. then pay them to secure it on the reg.
it's a fucking website with auth and a sql db. if you wanna make jobs a priority pay some cnut to make a website for the nz ppl. then pay them to secure it on the reg.
I Was Right About Everything (re: ManageMyHealth):
* API let ANY authenticated user access everyone else's files
* this was dumb and very much subpar
www.health.govt.nz/information-...
* API let ANY authenticated user access everyone else's files
* this was dumb and very much subpar
www.health.govt.nz/information-...
May 27, 2026 at 1:28 AM
I Was Right About Everything (re: ManageMyHealth):
* API let ANY authenticated user access everyone else's files
* this was dumb and very much subpar
www.health.govt.nz/information-...
* API let ANY authenticated user access everyone else's files
* this was dumb and very much subpar
www.health.govt.nz/information-...
"FA2. ManageMyHealth™ Patient Portal did not meet the procurement and contract review thresholds at the time due to low contractual value, despite the high risk data involved."
(p22 Health / Deloitte report; in relation to Northern District Health Board)
(p22 Health / Deloitte report; in relation to Northern District Health Board)
May 26, 2026 at 10:28 PM
"FA2. ManageMyHealth™ Patient Portal did not meet the procurement and contract review thresholds at the time due to low contractual value, despite the high risk data involved."
(p22 Health / Deloitte report; in relation to Northern District Health Board)
(p22 Health / Deloitte report; in relation to Northern District Health Board)
📢 NZ Herald Headlines | ManageMyHealth cyber attack, Kiwis paying more for their mortgages and Auckland Council locks in 7.9% rates rise | Wednesday, May 27, 2026
NZ Herald Headlines | Wednesday, May 27, 2026
www.nzherald.co.nz
May 26, 2026 at 7:32 PM
📢 NZ Herald Headlines | ManageMyHealth cyber attack, Kiwis paying more for their mortgages and Auckland Council locks in 7.9% rates rise | Wednesday, May 27, 2026
📢 The theft of the data was described as preventable, alongside being "neither technically sophisticated, nor particularly uncommon" by researchers.
ManageMyHealth warned before massive data breach – inquiry
www.1news.co.nz
May 26, 2026 at 6:02 PM
📢 The theft of the data was described as preventable, alongside being "neither technically sophisticated, nor particularly uncommon" by researchers.
📢 Nearly 100,000 patients had private medical data stolen and put up for sale online.
Who’s responsible? Inquiry outlines failings in ManageMyHealth cyber attack
www.nzherald.co.nz
May 26, 2026 at 5:02 PM
📢 Nearly 100,000 patients had private medical data stolen and put up for sale online.
ManageMyHealth sends me several emails about my appointment, it could easily let me know there's a wait (if it has that feature).
May 19, 2026 at 10:14 PM
ManageMyHealth sends me several emails about my appointment, it could easily let me know there's a wait (if it has that feature).
I think the best thing we can do with ManageMyHealth is to just nuke it. The web portal wants me to sign with Authenticator (not set up) and the place to set it up doesn’t appear to exist there. I can do almost everything I want in the app except add 2FA. I hate this portal.
May 13, 2026 at 9:33 AM
I think the best thing we can do with ManageMyHealth is to just nuke it. The web portal wants me to sign with Authenticator (not set up) and the place to set it up doesn’t appear to exist there. I can do almost everything I want in the app except add 2FA. I hate this portal.
It’s 1st May. I’ve just had confirmation from ManageMyHealth that they don’t believe my data was compromised back in January. JANUARY! Wtf. This shit needs better regulation.
April 30, 2026 at 9:22 PM
It’s 1st May. I’ve just had confirmation from ManageMyHealth that they don’t believe my data was compromised back in January. JANUARY! Wtf. This shit needs better regulation.
Well, today is April 30th which is when the Ministry of Health's review into ManageMyHealth was initially expected but there doesn't seem to be any messaging about it.
Same with Privacy Commissioner's report which is supposed to publicly report at the end of each phase, the first expected today.
Same with Privacy Commissioner's report which is supposed to publicly report at the end of each phase, the first expected today.
April 30, 2026 at 5:13 AM
Well, today is April 30th which is when the Ministry of Health's review into ManageMyHealth was initially expected but there doesn't seem to be any messaging about it.
Same with Privacy Commissioner's report which is supposed to publicly report at the end of each phase, the first expected today.
Same with Privacy Commissioner's report which is supposed to publicly report at the end of each phase, the first expected today.
This thread is boring miscellaneous stuff for my own reference later but ManageMyHealth backfilled a blog post today backdated March. It also links to a webinar recording from March hosted on Vimeo.
managemyhealth.co.nz/two-step-ver...
managemyhealth.co.nz/two-step-ver...
Summary Of The Manage My Health Update Webinar | Manage My Health
Two-step verification, account management and mobile app updates
managemyhealth.co.nz
April 20, 2026 at 2:48 AM
This thread is boring miscellaneous stuff for my own reference later but ManageMyHealth backfilled a blog post today backdated March. It also links to a webinar recording from March hosted on Vimeo.
managemyhealth.co.nz/two-step-ver...
managemyhealth.co.nz/two-step-ver...
[Response] Health New Zealand replied about ManageMyHealth Aide Mémoires prepared for Simeon Brown for January
April 16, 2026 at 2:26 AM
[Response] Health New Zealand replied about ManageMyHealth Aide Mémoires prepared for Simeon Brown for January
[Response] Health New Zealand replied about ManageMyHealth Aide Mémoires prepared for Simeon Brown for January
April 15, 2026 at 8:25 AM
[Response] Health New Zealand replied about ManageMyHealth Aide Mémoires prepared for Simeon Brown for January
[Follow up] Marcus about ManageMyHealth Aide Mémoires prepared for Simeon Brown for January
April 15, 2026 at 8:25 AM
[Follow up] Marcus about ManageMyHealth Aide Mémoires prepared for Simeon Brown for January
Wait… what were they doing before?
April 10, 2026 at 10:12 PM
Wait… what were they doing before?
this is subtweeting several groups but mostly ioc3, whose website up until like two days ago still redirected to 'bloxshield', who claim to have totally 100% really located the culprit of the ManagemyHealth hack but refuse to tell anybody because it might 'compromise the investigation'
April 2, 2026 at 9:19 PM
this is subtweeting several groups but mostly ioc3, whose website up until like two days ago still redirected to 'bloxshield', who claim to have totally 100% really located the culprit of the ManagemyHealth hack but refuse to tell anybody because it might 'compromise the investigation'