Tonga
| Primary URL | Location | Industry | www[.]tonga[.]to |
Country
Tonga
|
Healthcare
|
|---|
Profile
The organisation operates the National Health Information System for Tonga. This system is responsible for the collection, storage, and management of electronic health records. It supports clinical decision‑making and administrative functions across the country’s health facilities. By providing a centralized digital platform, it aims to improve the efficiency and safety of healthcare delivery.
As the national health information system, its services extend to all public health providers in Tonga. The system is designed to integrate data from hospitals, clinics, and community health centres. Its reach is therefore nationwide, covering the entire population served by the public health sector.
A distinguishing attribute of the organisation is its regulatory role in safeguarding health data privacy and security. It operates under the authority of the Tongan Ministry of Health, which sets standards for health information management. The system’s notable competency lies in maintaining interoperability between disparate health IT applications. This focus on standardization helps ensure that patient information can be shared securely when needed.
Structurally, the organisation is a government entity, wholly owned by the State of Tonga. Its headquarters are located in Nukuʻalofa, the capital city. There is no indication of private ownership or subsidiary relationships in the available information.
On 1 June 2025, the National Health Information System suffered a ransomware attack that encrypted its data. Officials responded by shutting down the system and reverting to manual processes while staff were initially unaware of the full severity. The breach was disclosed during a parliamentary debate, prompting the deputy prime minister to request assistance from the Australian High Commission, which dispatched a cyber‑security team. Authorities confirmed that the attackers demanded payment and that patient data remained inaccessible, though they could not yet determine whether any information had been exfiltrated.
