Excerpt from RNZ News Article, Published on 5 January 2026
A major data breach involving Manage My Health has placed thousands of patients at risk of identity theft and extortion, according to cybersecurity experts. Hackers claim they accessed a large volume of private medical and personal information, raising serious concerns about data protection within digital healthcare systems.
The attackers, using the name “Kazu,” announced online that they had stolen hundreds of thousands of patient documents from the platform. They demanded a ransom and threatened to release the data publicly if the company failed to comply. Security specialists say such threats often escalate when attackers believe organizations may delay or resist payment.
The exposed files reportedly include clinical notes, lab test results, vaccination records, and medical images. Personal details such as names, email addresses, phone numbers, and home addresses were also part of the breach. Experts warn that criminals can use this information for fraud, phishing scams, and targeted extortion attempts. Several patients and IT professionals criticized the delayed notification process. Hackers first posted about the breach days before many users received official alerts. During that time, the website remained accessible, which increased anxiety among patients and healthcare providers.
One affected patient, who works in IT, described seeing highly sensitive documents online. He said the breach created fear that criminals could exploit personal health information for blackmail. Such misuse of medical data can have long – term emotional and financial consequences.
The Health Minister called the incident a serious wake – up call for New Zealand’s digital health sector. Authorities urged Manage My Health to identify affected users quickly and communicate transparently. The Privacy Commissioner and National Cyber Security Centre are supporting the investigation and response. Cybersecurity experts advise patients to stay alert. Users should monitor accounts, watch for suspicious messages, and avoid sharing personal information online. Learning how to respond after a breach is critical.
To delve deeper into this topic, Visit RNZ News .
