Ministry of Health

The Ministry of Health of Tonga, commonly referred to as MoH, serves as the national governmental authority responsible for public health policy, regulation, and service delivery across the Kingdom of Tonga. Headquartered in the country, its core mandate encompasses the oversight and administration of the nation's health system, including the management of public hospitals, clinics, and community health programs. The ministry's scope is national, aiming to provide essential healthcare services to the entire population of Tonga. Its work involves implementing public health initiatives, managing disease prevention and control strategies, and ensuring the provision of medical care within the island nation's unique geographic and demographic context. As a central government entity, it operates within the framework of Tongan law and public administration, holding a primary regulatory and operational role in the health sector. The ministry's functions are critical to national security and societal well-being, directly impacting the health outcomes of all Tongan citizens and residents.

A significant event illustrating the operational environment of the Ministry of Health occurred on June 15, 2025, when it was targeted by the INC ransomware group. This incident resulted in the encryption of the ministry's information and communications networks, causing direct disruption to core national health services. The attack highlighted the ministry's reliance on digital infrastructure for essential functions and exposed it to the risk of data exfiltration. This cybersecurity event underscores the ministry's position as a critical infrastructure operator within Tonga, making it a target for cybercriminals seeking to exploit the vital nature of healthcare services. The incident provides clear evidence of the ministry's operational footprint and the potential consequences of cyber threats on its ability to fulfill its public health mandate. The disruption affected systems that support patient care, administrative processes, and potentially sensitive health data, demonstrating the interconnectedness of its digital assets with frontline service delivery. This event is a documented instance of the challenges faced by the organization in safeguarding its technological environment while maintaining continuous health services for the nation.