MMH Cyber Breach 5/1/2025

Dear all,
As you may be aware, there has been a cyber security incident involving unauthorised access to some ManageMyHealth (MMH) data. MMH is a third-party patient portal that integrates with our Practice Management System and has been used by our practice for approximately 10 years. We are extremely disappointed and concerned that this incident has occurred.

MMH has advised that the incident relates specifically to documents stored within a function called Health Documents. This function is not one we use or actively promote as part of our usual processes. However, MMH has confirmed that the affected documents may include:
• Hospital discharge summaries from Northland Hospital
• Some specialist referral letters dated between 2017 and 2019
• Documents uploaded by users themselves to the “My Documents” section

Importantly, the connection between our systems and MMH was not affected. None of the clinical data that we receive and hold directly has been involved in this incident. This includes consultation notes and message communications, which remain secure and confidential within the core MMH system.

MMH has advised that approximately 2.5% of our current patients may have been affected. This may include individuals who were not enrolled with our practice at the time the information was uploaded, as MMH accounts exist independently of practice enrolment.

MMH is the responsible holder of the affected information and will be contacting impacted users directly. These notifications are currently underway and are expected to be completed over the next few days. MMH will also provide information about accessing further support.

We acknowledge the distress that this incident has caused for many patients, and we share your concerns. We expect the next step to be an alert from MMH to affected patients (if not already received). In the meantime, we are continuing to update the alert page on our website daily with any relevant information specific to our practices.

Additional information is available via MMH’s FAQ page:

https://managemyhealth.co.nz/faqs-cyber-breach/

We understand that an 0800 support number will be available shortly, although this has not yet been provided. In the meantime, MMH can be contacted directly at support@managemyhealth.co.nz.

At this stage, we will continue to offer access to the MMH system, as many of our patients rely on it to interact with us regarding their healthcare. The MMH platform has been reviewed and confirmed as safe by external international cyber security experts and Health NZ.

If you would prefer to close your MMH account, you can do so by logging in to the MMH website, selecting My Account, and choosing Close Account. Once closed, your information will be deleted from the platform.

Mana Medical Directors