Manage My Health Data Breach
The Manage My Health (MMH) patient portal experienced a cyber security incident on the evening of Wednesday, 31 December 2025. MMH is currently working with Health New Zealand, the National Cyber Security Centre, the Office of the Privacy Commissioner, and external cyber security specialists to investigate the incident. MMH has advised that patient login credentials were not compromised. Direct notifications to affected patients commenced on 08/01/2026 and are being sent via email to the address patients used to register their account, with the communication personally addressed to the name associated with the account. The email includes a dedicated 0800 number to get help and advice. Patients are reminded to remain alert for anything unusual — MMH will never ask for login credentials by email, text, or phone. Patients who log into MMH via a web browser may see a green banner stating “no impact”, which confirms their account was not affected. If there is no banner, MMH may still be completing notifications over the coming days. For further information regarding the MMH cyber security incident, please visit https://managemyhealth.co.nz/faqs-cyber-breach/ for FAQs and updates.
