Key Takeaways
- More than 70% of individuals affected by the Manage My Health breach are based in Northland, with approximately 86,000 people impacted.
- The ransomware group Kazu demanded $105,000 after stealing hundreds of thousands of medical files from the patient portal.
- Manage My Health has notified around half of the 120,000 patients whose data has been stolen, with support available for those affected.
- Health NZ is seeking funding to provide consultation and mental wellbeing support for those impacted by the breach.
- A dedicated 0800 number will be provided for those affected to discuss their concerns and receive support.
Introduction to the Breach
The recent breach of the Manage My Health patient portal has had a significant impact on individuals in Northland, with over 70% of those affected residing in the region. According to Health NZ, the breach resulted in the theft of hundreds of thousands of medical files, with the ransomware group Kazu demanding $105,000 in exchange for the stolen data. The breach was limited to the ‘My Health Documents’ module, affecting approximately 6-7% of the 1.8 million registered users. Health NZ has confirmed that its own data systems have not been compromised, but the organization is taking the issue very seriously due to the sensitive nature of the stolen information.
Impact on Northland Residents
The breach has had a disproportionate impact on Northland residents, with an estimated 86,000 people affected. Health NZ has stated that it will be ensuring support is available for those in the region, with plans to provide funding for general practices to offer consultation and mental wellbeing support. Alex Pimm, group director of operations for Northland, emphasized the importance of providing support for those impacted, stating that the organization is seeking funding to enable general practices to provide consultation and support for individuals to discuss their clinical information and mental wellbeing. This support will be crucial in helping individuals cope with the potential consequences of the breach, including identity theft and emotional distress.
Use of Manage My Health in Northland
Health NZ uses Manage My Health in Northland to enable patients to access important documents, such as hospital discharge summaries, clinic letters, and referral notifications. This system allows consumers to access their medical information, regardless of whether they have a primary care provider. While Health NZ’s own data systems have not been compromised, the organization is taking the breach seriously and is working to provide support to those affected. The use of Manage My Health in Northland is unique to the region, and the breach has highlighted the importance of ensuring the security and integrity of patient data.
Response to the Breach
Manage My Health has notified around half of the 120,000 patients whose data has been stolen, with efforts underway to contact the remaining individuals. Those affected by the breach will be provided with an 0800 number to call, allowing them to discuss their concerns and receive support. Health NZ is also working to provide additional support, including consultation and mental wellbeing support, to those impacted by the breach. The organization’s response to the breach has been focused on providing support and resources to those affected, while also working to prevent similar breaches from occurring in the future.
Conclusion and Next Steps
The breach of the Manage My Health patient portal has had a significant impact on individuals in Northland, with over 70% of those affected residing in the region. Health NZ is working to provide support and resources to those affected, including consultation and mental wellbeing support. The organization is also seeking funding to enable general practices to provide additional support to those impacted. As the situation continues to unfold, it is essential that those affected receive the support and resources they need to cope with the potential consequences of the breach. The incident highlights the importance of ensuring the security and integrity of patient data, and the need for organizations to be proactive in preventing similar breaches from occurring in the future.