Health Minister Simeon Brown Addresses ManageMyHealth Data Breach

On January 1, 2024, a data breach involving the ManageMyHealth patient portal prompted a swift response from Health Minister Simeon Brown. Brown announced that he had been briefed by health officials regarding the incident, describing it as a serious breach of patient data. He emphasized that Health NZ is collaborating closely with ManageMyHealth to resolve the issue and protect patient privacy.

In a statement shared on social media, Brown reassured the public that there is currently no evidence suggesting that any Health NZ systems, including the My Health Account, have been compromised. He noted that ManageMyHealth operates separate systems, which has helped contain the situation. Brown stated, “Health NZ is coordinating with agencies, including the National Cyber Security Centre, to ensure all appropriate measures are being taken.”

Scope of the Breach and Ongoing Response

Vino Ramayah, chief executive of ManageMyHealth, confirmed that he was notified of a cyber-security incident involving unauthorized access to its application. He reported that the company has been working diligently to secure the application since the alert was received. “We believe the incident has been contained, and we have engaged independent international forensic consultants to verify the solution we have implemented,” Ramayah stated.

Preliminary investigations indicate that between six and seven percent of the approximately 1.8 million registered users may have been affected by this breach. ManageMyHealth has initiated an analysis to identify those impacted and plans to start notifying users within the next 48 hours. The Office of the Privacy Commissioner has been informed and is aiding in ensuring compliance with privacy legislation.

Ramayah acknowledged the anxiety such incidents can cause, stating, “People rightly place a high level of trust in systems that hold their health data, and we understand the concern this situation may create for patients, providers, and partners.” He expressed gratitude to users for their patience as the complex investigation unfolds.

Next Steps and Support for Affected Users

To support users during this time, ManageMyHealth plans to release a detailed FAQ aimed at addressing common concerns. Ramayah also urged users to follow online security guidelines available at the Own Your Online website to enhance their personal security.

In conclusion, both Health Minister Brown and ManageMyHealth are committed to transparency as they navigate this situation. Ramayah assures that the organization will provide further updates, with the next one scheduled for 3 PM on January 2, 2024. The focus remains on safeguarding patient privacy and ensuring that health services continue to operate without disruption.