NZ: Manage My Health breach: 50% of affected patients contacted

According to 1News, Manage My Health confirmed that the first 50% of up to 126,000 patients affected by the data breach had been notified. The privately operated patient portal reported an incident of unauthorised access to the My Health Documents module in the app late last year, with direct notifications sent this morning to the email addresses registered by patients.

The data stolen originated predominantly from Northland and included around 45 general practices, containing clinical discharge summaries and historical clinical referral records dating six to eight years. A further 355 referral-originating GP practices across several regions and personal health information uploaded by patients were also affected.

As of publication, Manage My Health’s most recent update was on 5 January 2026, and the article notes that the threat actor known as “Kazu” removed the listing and data sample from their Telegram channel and dark web leak site, with implications about whether payment was involved.