Manage My Health Breech

As you are aware by now, there has been a serious breach of some information stored by patients using the Manage My Health (MMH) portal. The incident also sits with the police, Te Whatu Ora, the Privacy Commissioner and our PHO.

We want to acknowledge that news like this can be worrying, and we want to reassure you that your wellbeing and privacy are very important to us. The Manage My Health team has advised that they are actively investigating the issue and have taken steps to strengthen security.

If it has been determined that you have been affected, MMH will have contacted you by email and provided you with a dedicated 0800 number to speak to someone at Manage My Health directly about this situation. You can also log in to your MMH account, and your Dashboard will clearly show your Account Security Status on the top right-hand side. There are also answers on their website to FAQs FAQs - Cyber Breach | Manage My Health and you can email MMH directly at info@managemyhealth.co.nz

 If you do not wish to click the above link, you can find the FAQ page by searching “MMH Cyber FAQ”

The documents that were able to be accessed we now know fall into 2 categories:

·         Hospital discharge documents from Northland hospitals (2017-2019).

·         Documents/images uploaded personally by the patient themselves into the ‘My Health Documents Folder’

No other part of the application was affected, My Health Documents has been tested and external cybersecurity experts have now also confirmed that the application is safe and secure and can continue to be used. The PMS and the connection between the PMS and Manage My Health are safe and secure and were not breached by the hackers.

However, as a further precaution, you may wish to:

• Change your Manage My Health password, (if you still use this portal), especially if you use the same password elsewhere
• Consider setting up and using the 2-factor authentication tool
• Be alert for unexpected emails, texts, or phone calls asking for personal information – do not give out any personal, medical or financial information to an unsolicited caller at any time.
• Avoid clicking on links or opening attachments from unknown sources

Please remember that we will never ask you for your password.

 If you notice anything unusual or have concerns about your personal information, we encourage you to contact Manage My Health directly or let our practice team know so we can support you.