Key Takeaways
- Hackers known as ‘Kazu’ have stolen data from a health app, affecting over 100,000 New Zealanders
- The hackers have removed information about the data online after a High Court injunction was granted
- Health Minister Simeon Brown has ordered an urgent review into the breach and considers it a serious incident
- Manage My Health CEO Vino Ramayah has taken full responsibility for the breach and is willing to step down if necessary
- The company is working to restore confidence and ensure the security of user data
Introduction to the Breach
The recent data breach of a health app has sent shockwaves throughout New Zealand, with over 100,000 users affected. The hackers, known as ‘Kazu’, had previously published samples of the leaked information online, but have since removed all posts referring to the breach from their account. This move comes after Manage My Health, the company behind the app, was granted a High Court injunction preventing anyone from accessing or sharing the stolen data. The breach, which occurred just before New Year’s, has been deemed a serious incident by Health Minister Simeon Brown, who has ordered an urgent review into the matter.
The Nature of the Breach
The breach is considered particularly serious due to the nature of the information that has been compromised. The data includes sensitive medical information, which is protected by strict privacy laws. Brown has stated that New Zealanders have a right to expect that their data is being held to the highest standards, and that the breach is unacceptable. Manage My Health has reported that between 6 and 7 percent of its approximately 1.8 million registered users were impacted, which translates to over 100,000 individuals. The company’s CEO, Vino Ramayah, has acknowledged that the breach is a significant blow to the company’s reputation, but is confident that they can recover and restore user confidence.
Response from Manage My Health
Ramayah has taken full responsibility for the breach, stating that he is willing to step down if necessary. He has also acknowledged that the company has "dropped the ball" and that patients should trust the company despite the breach. Ramayah’s own medical records were among those accessed, which he says has given him a personal perspective on the incident. The company is working to ensure that the security of user data is prioritized, and Ramayah has stated that they are doing the right thing to put providers and patients ahead of their own interests. However, a cyber security expert has expressed doubts about the company’s ability to recover from the breach, citing the significant damage to their reputation.
Government Response
The government has taken swift action in response to the breach, with Health Minister Simeon Brown ordering an urgent review into the incident. Brown has stated that the breach is not acceptable and that lessons need to be learned from the incident. The government is taking a proactive approach to addressing the breach, with Brown emphasizing the importance of protecting user data. The High Court injunction granted to Manage My Health is a significant step in preventing further damage, and the company is working closely with authorities to ensure that the stolen data is not shared or accessed.
Conclusion and Next Steps
The data breach of Manage My Health is a serious incident that has significant implications for the company and its users. The breach highlights the importance of prioritizing data security and protecting sensitive information. Manage My Health is working to restore user confidence and ensure that the security of user data is prioritized. The government’s response to the breach has been swift and proactive, with a focus on protecting user data and preventing further damage. As the investigation into the breach continues, it is likely that there will be significant changes to the way that Manage My Health handles user data, and the company will need to work hard to regain the trust of its users. Ultimately, the breach serves as a reminder of the importance of prioritizing data security and protecting sensitive information in the digital age.