ManageMyHealth

Profile narrative

ManageMyHealth operates a patient portal that enables individuals to access and manage their personal health information online. The organisation is headquartered in New Zealand and provides its services primarily to users within that jurisdiction. Through the portal, patients can view medical records, schedule appointments, and communicate with healthcare providers. The service is positioned as a digital health tool aimed at improving patient engagement and streamlining access to health data. ManageMyHealth’s core offering centres on the secure handling of sensitive health information within a regulated environment.

In December 2025, the organisation suffered a security breach in which attackers accessed its patient portal and exfiltrated tens of gigabytes of health data, affecting roughly six to seven percent of its user base. The incident was discovered after users reported service disruptions and learned of the event through social media and news outlets rather than direct notification. In response, ManageMyHealth shut down its mobile application, engaged forensic investigators, and obtained a court order to limit further dissemination of the stolen data. While asserting that its environment is now secure, the company apologised for the distress caused and cooperated with a government‑ordered review of its security practices. This episode highlights the organisation’s role as a custodian of personal health information subject to New Zealand’s data protection regulations.

Incidents

1 incident linked to this organisation.