Thousands of New Zealanders' health data was illegally accessed last year, in one of the country's biggest cybersecurity incidents.

The Privacy Commissioner found both entities failed to implement reasonable security safeguards to protect 100,000 patients.

Thousands of New Zealanders' health data was illegally accessed last year, in one of the country's biggest cybersecurity incidents.