Key Takeaways
- Manage My Health has notified approximately half of the 125,000 individuals whose data was stolen in a recent cyber breach
- The breach, carried out by hackers known as ‘Kazu’, affected around 6-7% of 1.8 million registered users, primarily in the ‘My Health Documents’ module
- Those impacted are being offered support, including consultations with general practitioners and mental wellbeing support
- A dedicated 0800 number has been set up for those affected to seek assistance
- The breach primarily affected Northland-based GP practices, with around 45 practices out of 355 across New Zealand impacted
Introduction to the Data Breach
The recent cyber breach of Manage My Health, the country’s largest patient health information portal, has left many individuals concerned about the security of their personal health information. The breach, which occurred at the end of last year, resulted in the theft of hundreds of thousands of files, affecting around 125,000 people. According to Health New Zealand, many of those impacted are based in Northland, with approximately 45 Northland-based GP practices out of 355 across the country affected. The hackers, known as ‘Kazu’, targeted the ‘My Health Documents’ module, which contains sensitive medical information.
Notification and Support Efforts
Manage My Health has been working to notify those affected by the breach, with around half of the 125,000 individuals already informed. Health New Zealand has assured that support will be available for those in Northland, with Northland operations group director Alex Pimm stating that the organization is seeking funding to enable general practitioners to provide consultations to those impacted. These consultations will not only focus on discussing clinical information but also provide mental wellbeing support. Additionally, an 0800 number has been set up for those affected to call and seek assistance. This support is crucial in helping individuals cope with the potential consequences of the breach and ensuring that their health and wellbeing are prioritized.
Extent of the Breach
The cyber incident was limited to around 6-7% of 1.8 million registered users, which is a significant number but still a relatively small proportion of the total user base. The breach was contained within the ‘My Health Documents’ module, which suggests that the hackers were targeting specific information. The fact that the breach was limited to this module may provide some reassurance to users who do not have sensitive information stored in this area. However, the breach still raises concerns about the security measures in place to protect patient health information and the potential risks associated with storing sensitive data online.
Impact on Northland-Based GP Practices
The breach has had a significant impact on Northland-based GP practices, with around 45 practices affected out of the 355 across New Zealand. This has resulted in a substantial number of patients being affected, and Health New Zealand is working to ensure that these individuals receive the support they need. The organization is seeking funding to enable general practitioners to provide consultations and support to those impacted, which will help to mitigate the effects of the breach. The fact that the breach has had a disproportionate impact on Northland-based practices highlights the need for targeted support and resources to be allocated to this region.
Conclusion and Next Steps
The Manage My Health breach highlights the importance of robust security measures to protect patient health information. While the breach was limited to a specific module, it still raises concerns about the potential risks associated with storing sensitive data online. Health New Zealand and Manage My Health must work together to ensure that those affected receive the support they need and that measures are put in place to prevent similar breaches from occurring in the future. The establishment of an 0800 number and the provision of consultations and mental wellbeing support are positive steps, but more needs to be done to restore trust and confidence in the system. As the investigation into the breach continues, it is essential that those affected are kept informed and that lessons are learned to improve the security and protection of patient health information.