Manage My Health patient data breach and alleged file theft
Data Leak
Summary
Hide ▲
Show ▼
Manage My Health said a breach detected on December 30, 2025 may have exposed health data tied to up to 1.8 million New Zealand patients, creating privacy risk for a national patient portal. An attacker using the alias Kazu claimed to have taken more than 428,000 files and threatened to sell or publish them unless a $60,000 ransom was paid. The incident is now contained, but patient notifications and a government review are underway.
Timeline
-
05.01.2026 17:15 1 articles · 4mo ago
Manage My Health detects cyber-attack and Kazu claims responsibility
Initial DisclosureManage My Health detected a cyber-attack on its online patient health portal on December 30, 2025, and an alleged attacker using the alias Kazu posted on a cybercrime forum the same day claiming to be behind the incident and saying more than 428,000 files had been taken.
Show sources
- New Zealand Orders Review of Manage My Health Breach Affecting 100,000+ Patients — www.infosecurity-magazine.com — 05.01.2026 17:15
-
05.01.2026 17:15 1 articles · 4mo ago
Kazu escalates the Manage My Health extortion threat
Attribution UpdateOn January 3, 2026, the alleged attacker using the alias Kazu posted on Telegram that all stolen data would be published within 48 hours if the $60,000 ransom was not paid, escalating the pressure tied to the Manage My Health breach.
Show sources
- New Zealand Orders Review of Manage My Health Breach Affecting 100,000+ Patients — www.infosecurity-magazine.com — 05.01.2026 17:15
-
05.01.2026 17:15 1 articles · 4mo ago
Manage My Health begins patient notification and response coordination
Industry Or Public Sector UpdateOn January 5, 2026, Manage My Health started notifying general practices through its secure Provider Portal, planned direct patient notifications later that week, and said it would work with Health New Zealand on a dedicated 0800 helpline for affected patients as the government increased support for the response.
Show sources
- New Zealand Orders Review of Manage My Health Breach Affecting 100,000+ Patients — www.infosecurity-magazine.com — 05.01.2026 17:15
-
01.01.2026 02:00 2 articles · 4mo ago
Manage My Health says patient data could be compromised
Victim Impact UpdateOn January 1, 2026, Manage My Health said between 6% and 7% of the roughly 1.8 million New Zealand patients registered with the portal could have been compromised, and it said it was working with Health New Zealand, the New Zealand Police, other government agencies, and independent international forensic consultants.
Show sources
- New Zealand Orders Review of Manage My Health Breach Affecting 100,000+ Patients — www.infosecurity-magazine.com — 05.01.2026 17:15
- New Zealand Orders Review of Manage My Health Breach Affecting 100,000+ Patients — www.infosecurity-magazine.com — 05.01.2026 17:15