Loading story…
A cyberattack on ManageMyHealth, a major New Zealand patient portal, compromised the sensitive health data of an estimated 6-7% of its 1.85 million users, affecting over 100,000 individuals. The breach prompted the New Zealand government to launch a formal review into the incident, focusing on its cause, scope, and the adequacy of the company’s security measures. ManageMyHealth has stated that the incident is now contained and is working with cybersecurity experts, law enforcement, and regulatory bodies to assess the full impact and strengthen its defenses.
In response to the breach, ManageMyHealth obtained a High Court injunction to prohibit the sharing of any stolen data, though the effectiveness of this legal measure remains uncertain, especially regarding international actors. Health New Zealand and General Practice New Zealand are coordinating a national response, and affected patients are being directly notified. The breach has raised significant concerns about the protection of highly sensitive health information and the need for improved security standards across both public and private healthcare data handlers in New Zealand.
See the actors and campaigns active against you right now.
7 events from the most recent confirmed update back to the earliest known activity.
By January 6, 2026, reporting indicated the attackers had extended their payment deadline while continuing to threaten release or sale of the stolen data. Around the same time, Manage My Health had begun notifying affected users about the breach.
New Zealand Health Minister Simeon Brown ordered a review into the cyberattack and the company's handling of it, calling the situation unacceptable. The government said support for affected individuals was a priority and reiterated that it would not pay ransom demands.
Health New Zealand and General Practice New Zealand began coordinating a national response, with affected patients to be notified directly. Public reporting said roughly 108,000 to 126,000 users, or 6% to 7% of the platform's 1.8 million users, may have been affected.
Manage My Health obtained a New Zealand High Court injunction aimed at preventing dissemination of the stolen patient data. Reports noted the order's practical reach may be limited because the alleged attacker was outside New Zealand and had not been served.
After discovering the breach, Manage My Health worked with law enforcement, privacy authorities, cybersecurity experts, and healthcare partners to investigate and contain the incident. The company patched the vulnerability, enhanced login security, secured document storage, and advised users to reset passwords, enable two-factor authentication, and watch for suspicious activity.
Following the breach, the threat actor using the alias Kazu claimed to hold about 108 GB of stolen data, including hundreds of thousands of sensitive files, and demanded a $60,000 ransom. The actor threatened to leak or sell the data, with reports indicating a payment deadline of January 15, 2026.
On December 30, 2025, Manage My Health detected a cyberattack affecting its Health Documents module. The company said the core patient database, clinical systems, and Health New Zealand infrastructure were not compromised.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
6 references tracked. Mallory keeps watching after this page renders.
techxplore.com
Open sourcego.theregister.com
Open sourcedatabreaches.net
Open sourcethecyberthrone.in
Open sourcegovinfosecurity.com
Open sourcebankinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple healthcare organizations have reported significant data breaches involving unauthorized access to patient information. CareOregon and Health Share of Oregon notified patients of a breach where protected health information, including names, dates of birth, health plan details, and Medicaid/Medicare numbers, was accessed without authorization, raising concerns about potential insurance fraud. Canopy Health, a major New Zealand oncology provider, disclosed a cyberattack that resulted in unauthorized access to administrative systems and possible data exfiltration, with the incident being contained and legal action taken to prevent misuse of the compromised data. Additionally, a Manhattan plastic surgery practice suffered a cyberattack in which sensitive patient images and personal information were stolen and published online, with extortion attempts made directly to patients; this attack is linked to a series of similar incidents targeting plastic surgery practices. In parallel to these incidents, California authorities have taken regulatory action against Datamasters, a marketing firm found to be illegally selling health and personal data of millions of individuals without proper registration as a data broker. The company was fined and banned from selling Californians' personal information after it was discovered to have traded in sensitive data, including health conditions and demographic details, for targeted advertising. These events highlight ongoing risks to health data privacy from both cyberattacks and improper commercial data practices, as well as the increasing regulatory scrutiny and enforcement in this sector.
Jun 29, 2026
Healthcare organizations experienced a significant number of large-scale data breaches in 2025, with nearly 57 million individuals affected and at least 642 incidents reported to the Department of Health and Human Services (HHS) Office for Civil Rights. While this represents a notable decrease from the previous year, the sector continues to face substantial risks, with several high-profile breaches exposing sensitive patient information. Notable incidents include breaches at major healthcare providers and patient information portals, with some cases resulting in legal settlements and direct financial compensation to affected individuals. Among the most impactful breaches, Consulting Radiologists Ltd. agreed to a $2.2 million settlement after a 2024 breach exposed the personal and medical data of approximately 512,000 people. Additionally, New Zealand's ManageMyHealth platform reported a breach potentially affecting over 108,000 users, highlighting the global nature of healthcare data security challenges. These incidents underscore the ongoing threat to patient privacy and the financial and reputational consequences for healthcare organizations that fail to adequately protect sensitive information.
Jun 29, 2026
Partnered Health, an Australian healthcare provider operating family medical clinics, disclosed a cyberattack that exposed patient data from clinics across Sydney, Melbourne, Canberra and other cities. Reports indicate the intrusion affected at least 16 clinics, while Partnered Health said data was accessed from 21 clinics on 23 June. The compromised information is believed to include highly sensitive medical records such as treatment details, consultation notes, referral letters, pathology and diagnostic results, along with personal and insurance data including names, dates of birth, addresses, Medicare numbers and private health insurance details. The company said it had notified affected patients and stakeholders and reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and law enforcement. Partnered Health also obtained an interim injunction from the New South Wales supreme court ordering that the accessed data not be used or published, but experts warned the records could still be traded on dark-web markets, where medical data is considered especially valuable.
Jul 20, 2026