Manage My Health portal
About 600 Waipā residents have been caught up in the Manage My Health security breach, The News understands.
Manage My Health website portal
Hackers accessed documents relating to seven percent of the clients in Manage My Health 1250,000 people – on December 30. The attack netted 400,000 documents.
The criminals followed up with a ransom demand of just over $100,000.
It is not clear when the deadline for the ransom is.
Manage My Health has been notifying affected users and practices, including some supported by PHO (Primary Health Organisation) Pinnacle Midlands Health Network.
“While we won’t provide individual practice figures, based on the latest indicative information available to us the total number of affected people connected to Pinnacle practices in Waipā appears to be around 600,” Pinnacle’s chief executive, Justin Butcher told The News on Monday.
Justin Butcher
“It’s important to note that some larger Cambridge practices sit with other PHOs and we don’t hold information for those practices.”
Personal details obtained can be used for further cybercrimes related to identity-theft-related fraud.
“During any incident like this, scammers may try to take advantage of uncertainty,” Butcher said. “So, we are encouraging people to be cautious, use official channels and not to share passwords or verification codes with anyone.”
Pinnacle represents more than 80 practices throughout the central North Island, including two each in Cambridge and Te Awamutu. In total, an estimated 6000 people across its network are thought to have been impacted.
“Health information is sensitive, so when people hear that documents have been accessed it’s understandable that some will feel upset and uneasy,” Butcher said.
“Confidence depends on clear communication, strong corrective action and people seeing that the right safeguards and assurances are in place.”
Manage My Health began the notification process last week.
“Our priority focus remains on direct communications with affected patients and practices,” a statement on the portal’s website reads.
“However, this is a complex exercise which unfortunately cannot be simplified due to the separate cohorts of patients affected which have to be dealt with in different ways.
“There is unfortunately no scenario in which Manage My Health could issue instant notifications to those impacted by the breach. Direct notifications have required coordination and clearance from relevant authorities and health sector stakeholders such as GP organisations.”
Health Minister Simeon Brown has pledged to undertake a review of the portal and the security breach.
“We need assurances around the protection and security of people’s health data,” he said. “Patient data is incredibly personal and must be protected to the highest of standards. We must learn from this incident to avoid any repeat events in the future.”
The News has requested final details from Manage My Health as to which Waipā practices, and how many of their patients, have been affected. We will share this information as soon as possible.
Manage my Health portals
