Manage My Health, Privacy Commissioner warned of security risks six months ago

MMH was granted a High Court injunction preventing anyone from accessing or sharing the stolen data. (Image: 123rf)

Wed, 07 Jan 2026

New Zealand’s privacy watchdog and Manage My Health were both warned of security issues with the Manage My Health platform six months before hackers would hold patients' private health data as ransom. Deputy Privacy Commissioner Liz MacPherson told BusinessDesk that the Office of the Privacy Commissioner (OPC) received an anonymous email about Manage My Health (MMH) in June 2025. The tipster alleged names, email addresses and passwords were “exposed by the Manage My Health platform”, MacPherson said. “...

Subscribe to BusinessDesk

Stay informed on business, government and financial developments across New Zealand.

Deeply researched, twice-edited and fact-checked news
Annual subscribers also receive a complimentary subscription to The Wall Street Journal
Personalised email news alerts, plus gift up to 5 stories a month to non-subscribers

You can cancel anytime.

We are serious about journalism.

Already a Subscriber ? Sign in here.

Name {{ registerForm.errors.get('name') }}

Email address {{ registerForm.errors.get('email') }}

Phone Number {{ registerForm.errors.get('phone') }}

Job Title {{ registerForm.errors.get('title') }}

Password Minimum password length of 8 characters.
Require at least one upper and lowercase, numeric, and special character. {{ registerForm.errors.get('password') }}

Repeat password {{ registerForm.errors.get('password_confirmation') }}

We had trouble validating your card. It's possible your card provider is preventing us from charging the card. Please contact your card provider or customer support.

Credit Card

Cardholder's name

{{ __(plans[index].name) | capitalize }} {{ plans[index].attributes.old_price | currency }} {{ plans[index].price | currency }}

All subscriptions auto renew but are easy to cancel.

I Accept The Terms Of Service

{{ registerForm.errors.get('terms') }}

Tax: {{ taxAmount(selectedPlan) | currency }}

Total Price Including Tax: {{ priceWithTax(selectedPlan) | currency }} {{ selectedPlan.type == 'user' && spark.chargesUsersPerSeat ? '/ '+ spark.seatName : '' }} {{ selectedPlan.type == 'user' && spark.chargesUsersPerTeam ? '/ '+ __('teams.team') : '' }} / {{ __(selectedPlan.interval) | capitalize }}