Manage My Health Breach
As you will be aware Manage My Health (MMH) reported a breach of its security last week, which allowed unauthorised access and download of a number of documents from the ‘My Health Documents’ part of the application.
The MMH application has now been forensically reviewed by international experts, and we have had assurance the problem is fully contained and corrected. The application is safe to use at this time.
MMH is now finalising details of the practices and patients directly impacted by the breach of its system. Some of the documents accessed are historical and may impact patients/providers who no longer use the MMH portal.
Impacted practices will be notified directly by ManageMyHealth by close of business on 5 Jan 2026.
MMH is working with Health NZ and the Office of the Privacy Commissioner on the process for notification of individuals. Based on this advice, MMH will then begin individual notifications to impacted individuals as soon as possible.
An 0800 number will be set up to provide more information for anyone concerned about the breach.
MMH continues to provide updates on its website at https://managemyhealth.co.nz/faqs-cyber-breach/ The latest statement from MMH can be found here: https://managemyhealth.co.nz/mmh-cyber-breach-update-3-january-2026/ which includes up to date information including the fixes and legal action being taken as well as FAQs.
We expect MMH and all other providers of health information systems to meet the highest standards around security, with patient safety and privacy a top priority. We expect that learning from this incident will be rapidly shared across the health system, and that further steps will be taken around accreditation of vendors in 2026.
FAQs
How can I confirm whether my personal information has been affected by the breach?
Affected individuals will be notified as soon as it is possible to verify the details of who is impacted and what data has been compromised.
What if I have changed practices – how will I know/how can I be contacted?
You will be contacted if you have been affected, no matter what practice that you are currently enrolled with.
How can I opt out of Manage My Health as a patient?
Go to the MMH app and sign in - go to My Account - Close Account
What happens to my information on MMH if I leave the platform?
Your information is deleted when you close your account.