Manage My Health - patient portal

MMH Cyber Breach - update 2nd February 2026

​

Since this incident, our focus has been on stabilising the environment, working with independent cyber security specialists, supporting affected patients, and strengthening safeguards across the platform. We recognise that clear and predictable information helps reduce uncertainty, and we are committed to keeping you informed as this work continues.

 

Independent cyber security specialists have confirmed that the current Manage My Health application and operating environment are secure and functioning as intended. There is no evidence of ongoing unauthorised access. The incident was contained, affected systems were isolated where required, and additional controls have since been implemented, tested and reviewed.

 

In early January, Manage My Health also obtained a court injunction preventing any third parties from accessing, using or disseminating data associated with the incident. This step was taken to further limit risk and protect affected individuals.

 

The matter has been referred to, and remains under active engagement with, New Zealand Police, the National Cyber Security Centre, Health New Zealand and the Office of the Privacy Commissioner. Manage My Health is fully cooperating with these agencies and providing information as required. These reviews are ongoing, and we will share relevant outcomes with general practices where appropriate.

 

Support for affected patients remains in place. This includes a dedicated 0800 support line, email support, and free access to IDCARE (Australia and New Zealand’s identity and cyber support service), for any patient who requires advice or reassurance.

 

For clarity, actions taken to date include:

• Late December: Unauthorised access identified and immediately contained. Affected systems isolated and external forensic specialists engaged.

• Early January: Confirmation of information accessed, staged patient notification commenced, patient support channels established, and court injunction obtained.

• January: Independent forensic review completed, confirming the environment is secure. Additional security controls implemented and tested.

• Ongoing: Engagement with law enforcement, the National Cyber Security Centre, Health New Zealand and the Office of the Privacy Commissioner, continued patient support, and review of safeguards and governance processes.

 

Our website remains the central source of up-to-date information, including FAQs and patient guidance, and will continue to be updated as needed: www.managemyhealth.co.nz

 

As the response work moves into a more stable phase, we expect to reduce the frequency of routine updates. Further communications will be provided where there are material developments relevant to general practices.

 

If you have questions or would like to discuss this update, please contact us at info@managemyhealth.co.nz.​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​

​

About Manage My Health.......​

Manage My Health is Sydney Street Health Centre's secure online health portal that our patients 16 years and over can use to:

• Book standard 15 minute appointments online (not for Driver Licenses or double appointments,  Please contact our)

• Check test results

• Request repeat prescriptions

• Make contact with your GP about any brief concerns you have about yourself or your immediate family.

 

If you would like to access the health portal online, please click on the link below to register

​

​

 

Click on the link below to book an appointment through Manage My Health​

​

​​

​

​You can also download the mobile app on Apple App Store or Google Play Store.

​

​

​