Key Takeaways
- 45 GP practices in Northland were affected by a data breach, with hundreds of patients having their personal details compromised
- Patients’ clinical and discharge letters were taken by cyber criminals, with some reporting difficulties in accessing their records
- Manage My Health has apologized for the breach and is directly contacting impacted users to notify them and support them through the process
- The company has added a new section to the affected patients’ portals, listing the documents that were taken and when
- Extra staff have been brought in to support patients who are worried about the breach
Introduction to the Data Breach
The recent data breach affecting 45 GP practices in Northland has left many patients feeling concerned and frustrated. Court documents have revealed the extent of the breach, which included the hacking of personal details and clinical records. Whangārei resident Ian Sweeney was one of the patients who received an email from Manage My Health, informing him that his personal details had been compromised. The email advised him to change his password and enable multi-factor authentication, but Sweeney felt that this was not enough. He expressed his discontent, stating that the breach should never have happened, especially since Manage My Health was dealing with sensitive information that needed to be protected at all times.
Patient Reactions and Experiences
Another patient in Whangārei discovered that five of her clinical and discharge letters had been taken by cyber criminals on December 29, two days before the breach was detected. She described the aftermath as a "s***show", citing difficulties in accessing her records and figuring out what information was actually in the files that were taken. Other patients have reported similar experiences, with some finding that their documents stored on the portal have gone missing. Patients in Dargaville and Raumanga have also reported receiving notifications about the breach. The Ngāti Hine Health Trust chief executive, Tamati Shepherd-Wipiiti, initially stated that only three of the trust’s clinics were affected, but later revealed that hundreds of patients had been impacted.
Response from Manage My Health and Healthcare Providers
Manage My Health has apologized for the breach, stating that the current system is secure and operating as intended. The company has added a new section to the affected patients’ portals, called Account Security Status, which lists the documents that were taken and when. However, some patients have reported difficulties in accessing this information. Manage My Health has also stated that it will directly contact patients whose documents were stolen, and that it is responsible for notifying impacted users and supporting them through the process. The Privacy Commissioner has emphasized the importance of the company’s role in this process. Healthcare providers, such as the Ngāti Hine Health Trust, have also been proactive in responding to the breach, bringing in extra staff to support patients who are worried.
Impact on Patients and Healthcare Providers
The data breach has had a significant impact on patients and healthcare providers in Northland. Many patients have expressed concerns about the security of their personal information, and some have reported difficulties in accessing their records. Healthcare providers have had to respond to the breach by notifying patients and providing support, which has required additional resources. The Ngāti Hine Health Trust has brought in extra staff to help support patients who are worried, and other healthcare providers have also been working to respond to the breach. Manage My Health has explained that the breach was limited to the Northland region, where it provides a service for patients to receive hospital discharge summaries through the portal.
Conclusion and Next Steps
The data breach affecting 45 GP practices in Northland is a serious incident that has had significant consequences for patients and healthcare providers. Manage My Health has apologized for the breach and is working to notify and support impacted users. However, many patients remain concerned about the security of their personal information, and some have reported difficulties in accessing their records. As the situation continues to unfold, it is essential that Manage My Health and healthcare providers prioritize the security and privacy of patients’ personal information. This includes providing clear and timely communication, supporting patients who are worried, and taking steps to prevent similar breaches from occurring in the future.
