Photo: RNZ / Finn Blackwell
In one of the biggest privacy breaches in New Zealand history, at the end of 2025 hackers got access to health data being held by privately owned patient portal Manage My Health.
The cyber criminal(s) demanded thousands of dollars as a ransom, threatening to otherwise release the data on the dark web, potentially exposing more than 120,000 New Zealanders' medical details.
Here is a recap of what has happened, and what we know, so far.
2020
Patient portal Manage My Health, founded in 2008, was spun out of Medtech Global into founder Vino Ramayah's Cereus Holdings. It had 700,000 users at this stage - a number that would grow to more than 1.8 million over the next five years.
Earlier in 2025
In July, a digital forensics and cyber security company in Nepal reported a hacker going by the name 'Kazu' allegedly stole 1.4TB of data from the Nepali Ministry of Education, Science, and Technology, including student information and academic transcripts.
Similar claims were made about attacks on a doctors group in Texas, the Colombian Ombudsman, the Thai Department of Agricultural Extension, the Kuwait Ministry
Continue Reading on RNZ
This preview shows approximately 15% of the article. Read the full story on the publisher's website to support quality journalism.