Manage My Health has confirmed that a recent cyber security incident was limited to a single part of its system, with independent forensic specialists finding the wider platform is now secure and operating as intended.
The company said the breach affected only the Health Documents module, not the entire app, following unauthorised access detected in late December.
Ongoing forensic analysis has identified that around 6 to 7 percent of the platform’s approximately 1.8 million registered users may have had documents accessed. Manage My Health says it now has a complete list of people potentially affected and expects to receive confirmation of the specific documents involved in the coming days.
Once final verification steps are completed, the company plans to begin notifying affected users directly from early next week. It says this process will be carried out in coordination with primary health organisations and general practices to ensure people receive accurate information and appropriate support, in line with Privacy Act requirements.
Additional safeguards have been introduced, including stronger login checks, limits on repeated access attempts, and enhanced security for stored health documents.
Manage My Health has also begun legal action in response to the breach.
Users are being encouraged to reset their passwords and enable two-factor authentication where available. Instructions for setting up two-factor authentication can be found here.
The company has also advised people to remain alert for any unusual activity, such as unexpected medical bills, insurance claims, or communications from healthcare providers they do not recognise, and to report anything suspicious to the appropriate authorities.
The company says it will provide further updates as soon as new information becomes available, adding that transparency, system security, and user support remain its priorities.

Hopefully this will wake a few people up – having everything digital IS NOT a good idea.
“Having everything digital”: Including your doctor.
I’m not on manage my health I’d like to know do they have your bank account on record to paid for your doctor’s appointment
Did they get the names of the 11,000 MOH employees who got a vaccine exemption???
Manage My Health – securely NZ Owned and controlled – Yeah Right.
Already in the palantir bucket along with your medical records.
But – dont worry – collins’s digital ID will make it all more “convenient” for all the fluoride poisoned, compliant fools!
Wake up!
BTW – wasn’t only moh people who were exempt – politicians exempted themselves and also their lackeys.
The naughty chair needles with liardern and dripkins were obviously fake..
Simple answer – M protocol for the lot of them.
Oh, and by the way, responders and contributors to Daily Telegraph reply / feedback already have tagged files in govt palantir databases.
You pack of non compliant bastards – how dare you think for yourselves???