Manage My Health has contained a late‑2023 cyberattack that accessed documents in its “My Health Documents” feature and has notified most potentially affected users. The company warns fraudsters are impersonating the patient portal to send phishing messages while it works with regulators, the High Court, and partners like IDCARE to monitor leaks and protect users. #ManageMyHealth #MyHealthDocuments
Keypoints
- Fraudsters are impersonating Manage My Health to send phishing and spam messages to affected users.
- The breach was limited to documents stored in the “My Health Documents” section and did not affect live clinical systems or prescriptions.
- Attackers demanded ransom and threatened to release data that could have exposed medical details of over 120,000 New Zealanders.
- Manage My Health secured the affected feature, engaged independent forensic specialists, and has been notifying users—some notifications were later found to be premature.
- The incident prompted a High Court injunction, an Office of the Privacy Commissioner inquiry, ongoing monitoring of leak sites, and a partnership with IDCARE for victim support.
Read More: https://thecyberexpress.com/manage-my-health-data-breach-phishing/