The country's largest patient information portal, ManageMyHealth, says it has identified and fixed the security gaps that allowed "unauthorised access" to user information.
After first confirming the cyber security incident on Wednesday, the platform said today that one module within the app, Health Documents, was compromised, not the whole app.
Between 6% and 7% of 1.8 million registered users were affected. ManageMyHealth had a complete list of those whose documents may have been accessed and would work on a forensic analysis of the specific documents involved over the coming days.
"We expect to start notifying those affected following confirmation of forensics and liaison with PHOs and GPs to ensure that individuals are getting the right information, in line with Privacy Act requirements, and are properly supported," the Saturday release read.
It expected to begin informing affected parties directly from early next week.
It was also setting up a dedicated helpline – in the form of an online helpdesk and 0800 number – to be ready for both practices and users by early next week.
In addition to fixing the security gap, which was "independently tested and verified by external cybersecurity experts", ManageMyHealth said it has made log-ins more secure and re-secured all health documents.
Users were encouraged to reset their passwords or enable two-factor authentication to enhance the security of their accounts.
"In addition, keep an eye out for anything unusual, such as medical bills or insurance claims you don’t recognise, or unexpected letters from healthcare providers. If you see anything that looks odd to you, contact the relevant provider immediately."
It was working with independent cyber secutiy specialists, the Privacy Commissioner, NZ Police and Health NZ.
"We appreciate the patience and cooperation of practices, patients, and partners. Our priority remains transparency, system security, and ensuring appropriate support is available while the investigation is finalised."
SHARE ME