Manage My Health didn't have adequate security controls, the Privacy Commissioner has found.
Health NZ and its patient portal Manage My Health "failed in their responsibilities" to have adequate security controls when hundreds of thousands of medical files were stolen in a cyber attack, the Privacy Commissioner has found.
Described as one of the country's biggest cybersecurity incidents, hacker(s) obtained access to sensitive health data held by privately owned patient portal Manage My Health in December last year.
Reviews were subsequently commissioned by Health NZ, Ministry of Health and the Office of the Privacy Commissioner.
In findings released on Wednesday, commissioner Michael Webster found both Manage My Health and Health NZ had deficient security safeguards in place to protect patient information.
