Porirua patients who use the online health portal Manage My Health are being advised to stay informed following a ransomware attack on the company’s systems.
Manage My Health has confirmed it was the target of a cyberattack and that some data has been posted online. The company says its preliminary investigation has found no evidence that its core patient database was accessed, no evidence of data modification or destruction, and no evidence that user credentials were accessed.
The company has said about 120,000 people may have been affected nationally. Manage My Health is used by about 1.8 million New Zealanders, including patients enrolled with general practices in Porirua.
Local clinics contacted by Porirua News said they had been directed to refer questions to Manage My Health and Te Whatu Ora Health NZ while investigations continue.
Health NZ has confirmed it is working with Manage My Health and other government agencies and has brought in independent cybersecurity specialists. The National Cyber Security Centre, Police, and the Office of the Privacy Commissioner are also involved.
Manage My Health notified Police after identifying the ransomware attack and has since issued statements to users. The company has acknowledged a ransom demand was made but has not said whether it will be paid, noting government guidance discourages ransom payments.
Patients have been advised to update their passwords and remain alert to any unusual activity. Manage My Health says it will continue to provide updates as more information becomes available.
Further information for patients is available on the Manage My Health website at
https://managemyhealth.co.nz/faqs-cyber-breach/