Key Takeaways
- A patient discovered that her medical records were still being uploaded to Manage My Health, despite her GP ending its contract with the platform over two years ago.
- The patient health information portal is contacting thousands of patients whose private medical information has been caught up in a ransomware attack.
- Manage My Health is working to notify all affected patients and is providing support and assistance to those impacted.
- The incident has caused disruption and pain to patients and providers, and Manage My Health has apologized for the harm caused.
Introduction to the Incident
A recent discovery by a patient has raised concerns about the handling of medical records by Manage My Health, a patient health information portal. The patient, Rachel, who is enrolled at one of The Doctors Medical Centres in Auckland, was shocked to find that her medical records were still being uploaded to Manage My Health, despite her GP ending its contract with the platform over two years ago. This revelation has sparked an investigation into the handling of private medical information and has led to the notification of thousands of patients who may have been affected by a ransomware attack.
The Patient’s Experience
Rachel had been informed by her clinic in November 2023 that it was switching to a new in-house app and that Manage My Health was "no longer available". She assumed that this meant her data had been migrated and deleted from the platform. However, when she checked her old log-in, she was surprised to find that it still worked and that her medical records, including lab results, were still being uploaded to Manage My Health. This discovery has left Rachel wondering how her data was still being shared with the platform, despite her GP’s switch to a new provider. The fact that she was still able to access her old account and view her medical records raises serious concerns about the security and handling of patient data.
Response from Manage My Health
Manage My Health has apologized for the incident and is working to notify all affected patients. The company has stated that it hopes to finish notifying all affected patients by "early next week" and will be sending email notifications to the addresses used to register accounts. The email notifications will include an 0800 number that impacted individuals can call to get support and assistance. Manage My Health has also stated that it is working around the clock with authorities and agencies to respond to the incident and resolve the matter for patients and general practices. The company’s response to the incident has been prompt, but it remains to be seen whether it will be enough to alleviate the concerns of patients whose data has been compromised.
Implications of the Incident
The incident has significant implications for the handling of patient data and the security of medical records. It highlights the need for healthcare providers to ensure that patient data is handled and stored securely, and that patients are informed about how their data is being used and shared. The fact that Rachel’s medical records were still being uploaded to Manage My Health, despite her GP’s switch to a new provider, raises questions about the integration of different healthcare systems and the potential risks associated with data sharing. The incident also underscores the importance of transparency and communication between healthcare providers and patients, particularly when it comes to the handling of sensitive medical information.
Investigation and Next Steps
The incident is currently being investigated, and Manage My Health is working to notify all affected patients. The company has stated that it is working closely with authorities and agencies to respond to the incident and resolve the matter for patients and general practices. It is likely that there will be further developments in the coming days and weeks, and patients who have been affected by the incident will be looking for reassurance that their data is being handled securely. In the meantime, patients who are concerned about their medical records or have questions about the incident can contact Manage My Health directly or reach out to their healthcare provider for more information. As the investigation continues, it is essential that patients are kept informed about the progress and any steps being taken to prevent similar incidents in the future.
Conclusion
The discovery that medical records were still being uploaded to Manage My Health, despite a GP ending its contract with the platform, has raised serious concerns about the handling of patient data. The incident has highlighted the need for healthcare providers to ensure that patient data is handled and stored securely, and that patients are informed about how their data is being used and shared. As the investigation continues, it is essential that patients are kept informed about the progress and any steps being taken to prevent similar incidents in the future. The incident serves as a reminder of the importance of transparency and communication between healthcare providers and patients, particularly when it comes to the handling of sensitive medical information.