Health New Zealand and General Practice New Zealand are reassuring patients that support is in place following a cyber security breach involving patient information on the ManageMyHealth portal.

ManageMyHealth is a privately operated online service used by some general practices to share health information with patients.

The company reported a breach of its systems in the early hours of 31 December 2025 and now says the incident is contained.

ManageMyHealth said the general practices linked to affected patients are now identified, and individual patients whose information was involved will be contacted.

The company is expected to provide a timeframe for notifications by Tuesday.

Health New Zealand is working with primary care providers through General Practice New Zealand to understand the impact on patients and general practices.

An incident management team is in place, with advice and support from the National Cyber Security Centre and the Police Cyber Crime Unit.

“Unfortunately, malicious cyber activity is a constant threat, and New Zealand is not exempt from this. We expect ManageMyHealth, and all providers of health information systems, to meet the highest standards of security, with patient safety and privacy a top priority,” said Jason Power, National Director Planning, Funding and Outcomes at Health New Zealand.

“We are working with ManageMyHealth to ensure clear communication to patients and general practices affected by this breach. We also expect assurance that protections are in place to prevent any repeat of this incident, and that lessons learned are shared across the health system,” he said.

Health New Zealand is supporting legal action being taken by ManageMyHealth to protect the information taken in the breach.

General Practice New Zealand Chair Bryan Betty said Primary Health Organisations are continuing to support general practices in the coming days.

“They are making sure queries and concerns are addressed, and will work alongside ManageMyHealth and Health New Zealand to support any patients whose information has been compromised,” he said.

There is no impact on Health New Zealand systems or other patient portals. General practices remain open and people can continue to seek care as normal.

ManageMyHealth is providing updates on its website and through its patient app, and is establishing an 0800 number for people who are concerned or affected.